Jan Engelhardt <jengelh@xxxxxxx> wrote: > On Thursday 2012-07-12 17:49, Pablo Neira Ayuso wrote: > >> +config NETFILTER_XT_TARGET_SYSRQ > >> + tristate '"SYSRQ" - remote sysrq invocation' > > > >I guess this is useful for user, eg. you can reboot your crashed > >system from your office in case that cheap comodity hardware without > >remote management tools (eg. HP's ILO or Dell's iDRAC). > > > >Still, I think that including this in Netfilter is a bit of abuse > >since this is out of the scope of providing some firewalling feature. > > David Miller has stated his opinion already last year, and he's > for the Netfilter variant: > http://markmail.org/message/d7kpczdbtpcxwli6 We now have udp encap support also for ipv6, so this could now be solved outside of netfilter without impacting the ability to filter sysreq packets. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
