On Thursday 2012-07-12 22:26, Florian Westphal wrote: >Jan Engelhardt <jengelh@xxxxxxx> wrote: >> On Thursday 2012-07-12 17:49, Pablo Neira Ayuso wrote: >> >> +config NETFILTER_XT_TARGET_SYSRQ >> >> + tristate '"SYSRQ" - remote sysrq invocation' >> > >> >I guess this is useful for user, eg. you can reboot your crashed >> >system from your office in case that cheap comodity hardware without >> >remote management tools (eg. HP's ILO or Dell's iDRAC). >> > >> >Still, I think that including this in Netfilter is a bit of abuse >> >since this is out of the scope of providing some firewalling feature. >> >> David Miller has stated his opinion already last year, and he's >> for the Netfilter variant: >> http://markmail.org/message/d7kpczdbtpcxwli6 > >We now have udp encap support also for ipv6, so this could now >be solved outside of netfilter without impacting the ability to >filter sysreq packets. How does xt_SYSRQ inhibit filtering sysrq packets? -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
