Re: [PATCH v2 3/3] ipset: change 'iface' part in hash:net,iface set

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, 13 Jul 2012, Mr Dash Four wrote:

> Let me ask you a question then - if I send you the patches where in/out is
> allowed in list:set and produces "consistent" (by your own high-standards)
> result would that be OK with you (if not, why not)?

I can see two possible solutions with "in/out" notation and list:set type:

a. The keywords are not permitted at all.
b. "in/out" is permitted but "converted" to "src/dst" wherever needed for
   the member sets, that is all types but hash:net,iface.

Solution a. is completely acceptable for me. It can nicely be documented, 
there's no chance for misunderstanding.

Solution b. is also acceptable but it's more controversial: if "in/out" is 
accepted with list:set type, then it's very hard to explain why it's *not* 
allowed with every type, when actually "in/out" is allowed then for every 
type of member sets of list:set type of sets. So solution b. implies that 
"in/out" is then a general synonym of "src/dst" and should be allowed 
everywhere. Therefore I'm not really happy with solution b. but I can 
stomach it.

Do you see other possibilities, which produce result independent of the 
allowed syntax?

Best regards,
Jozsef
-
E-mail  : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux