Re: [PATCH 1/1] add markmask for hash:ip,mark data type

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, 17 Dec 2013, Vytas Dauksa wrote:

> Introduce packet mark mask for hash:ip,mark data type. This allows to
> set mark bit filter for the ip set.

Why it's important that the kernel should mask the mark value, when the 
user could add the intended value directly? The only case where it's 
required when entries added/deleted by the SET target. It's more natural 
for me if the markmask value has a meaning and effect for kernel side 
add/del operations only, and ignored for user add/del/test and kernel 
tests. What's your opinion?

A small thing, but I'd prefer if the mark value were printed/saved in hex 
instead of decimal, similarly to iptables. Better introduce a new print 
function for it.

Best regards,
Jozsef
-
E-mail  : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux