On Thu, Jan 19, 2012 at 10:12:48AM +0100, Pablo Neira Ayuso wrote: > I still think this can be useful. > > But, why don't you add this to the LOG target as an extension instead > of yet another target? By "extension", I meant to say "revision". If you're not familiar with the iptables revision mechanism, for instance, have a look at net/netfilter/xt_NFQUEUE.c Look for the "revision" pattern in that code. Basicaly, it allows you to enhance existing matches/targets without breaking backward compatibility. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html