On Fri, 13 Jul 2012, Mr Dash Four wrote: > Let me ask you a question then - if I send you the patches where in/out is > allowed in list:set and produces "consistent" (by your own high-standards) > result would that be OK with you (if not, why not)? I can see two possible solutions with "in/out" notation and list:set type: a. The keywords are not permitted at all. b. "in/out" is permitted but "converted" to "src/dst" wherever needed for the member sets, that is all types but hash:net,iface. Solution a. is completely acceptable for me. It can nicely be documented, there's no chance for misunderstanding. Solution b. is also acceptable but it's more controversial: if "in/out" is accepted with list:set type, then it's very hard to explain why it's *not* allowed with every type, when actually "in/out" is allowed then for every type of member sets of list:set type of sets. So solution b. implies that "in/out" is then a general synonym of "src/dst" and should be allowed everywhere. Therefore I'm not really happy with solution b. but I can stomach it. Do you see other possibilities, which produce result independent of the allowed syntax? Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html