Re: [PATCH 0/3] ipset: change 'iface' part in hash:net,iface set

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Explain the above comment please?

Are you deliberately deaf to the arguments?
My hearing is still quite sharp, thank you. As for the "arguments" bit - as far as I understand it (well, hoping, at least anyway), this is a discussion, and nobody's "arguing".

You want a choice to be introduced which lead to confusion - I'm repeating it countless times and you just ignore it.
How am I ignoring it? I asked you before and I am asking you again to explain what that "confusion" is? It is quite clear to me what the meaning of "in" and "out" is (again, if it is not made clear in the various man pages, I would certainly appreciate any suggestions you - or anyone else following this - might have). Again, if there is something "confusing" in that meaning, then I'd like to know.

To reiterate once again - 'in' is for matches of incoming interfaces only and should only be used for that particular purpose (it is one reason why I am dead against your idea for this to be used "everywhere" - to answer your other query below). Similar with 'out', but for outgoing interfaces.

I don't know how much more clearer that could be, to be honest, but if you have something on your mind, I am certainly all eyes/ears!

In order to prevent such confusions, I offered that let "in/out" be alias to "src/dst": accepted as input everywhere but printed/saved with hash:net,iface only. You point blank refused it.
That is correct, and I also remember asking the question to whom do you think that solution would be "easier"? You declined to answer that particular query. It certainly won't be for the end user, that's for sure!

As for your suggestion above, I'll repeat what I've already posted - of course I'll refuse it, because it is completely nonsensical. Do you not think that referring to a destination IP address, for example, as "out" IP address isn't confusing in the slightest? I mean, really Jozsef, you could do better than that!

Then come up with a better solution than the submitted one.
I will, if you let me know what is wrong, in your view, with the one I submitted yesterday.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux