On Fri, Mar 02, 2012 at 12:59:15PM +0900, Darren Willis wrote: > On Wed, Feb 29, 2012 at 08:54, Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote: > > Yes. I'd like to send a patch for RFC to the mailing list any time > > soon. I'll include you in the CC. > > Thanks, sounds interesting. > > > I'm currently working on one user-space helper infrastructure. We can > > use that infrastructure to implement this helper and many others. > > > > I've got the patch in one branch of my kernel tree, it's still > > experimental stuff, but I expect to have it done soon. > > > > Would you be OK with we make this (and other helpers that will surely > > follow up) in user-space? > > Well, I think long-term that's the way to go. I'd still like to get > this in its current form, if possible, since it's a simple thing in a > pretty OK state right now, so it could be ready to go quite quickly. > Whereas, although I think your helper framework sounds great and is > the right thing to do, it's also an unknown amount of time away. > Unless it's going to be landing in the next few weeks? If we apply this, we'll have to live with it for long time until we can remove. It's easy to get something it, but not evident to get it out because somebody will be using it. > Of course, I don't want to make a lot of work for you - I'll be more > than happy to revisit this, remove the dhcpv6 helper and re-implement > it for your new helper framework when it's ready for external > contributions. One firewall vendor is supporting the development of this helper user-space infrastructure, so we'll have the infrastructure soon (by next kernel release cycle). Please, ping me in three months or so if you see no advances in this regard. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html