On Friday 2012-07-06 21:05, Mr Dash Four wrote: > >> You have to introduce a new set type version whenever a new feature is added: >> in your patches there is no protection against mixed cases, when only the >> kernel or just the userspace is upgraded. Or one side is downgraded for >> whatever reason. >> > You mean object version (similar to the one you had a debate about on this ML > with Mr Engelhardt a while ago)? The SO version is purely a userspace issue. Here, Joszef means the user-kernel interaction; a too-old userspace ipset binary would not know how to interpret a too-new kernel response which has IFACE set; and a too-old kernel would not know how to read a too-new ipset request with IFACE set. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html