Madhav Diwan wrote:
Just curious but where did the unclean match target disappear to? I
thought that was part of the base iptables target set.
It was removed in 2.6. See the following for the reasons:
http://lists.netfilter.org/pipermail/netfilter-devel/2003-August/012199.html
patchomatic-ng was no help either.
It should eventually turn up in pom-ng, but nobody has cared enough about
it yet to get it working for 2.6.
By the way , as a side note, just which iptables patches DO apply to the
kernel 2.6 series? its at version 2.6.5 now and severely needs some
firewalling support. , for instance h323 and the failover connection
tracking?
The patch-o-matic-ng/*/info files give the version requirements for each
patch. Again, it's just a matter of someone needing them enough to fix
them for 2.6.
--
Philip Craig - SnapGear, A CyberGuard Company - http://www.SnapGear.com