On Thu, Apr 12, 2012 at 12:00:03PM +0300, Denys Fedoryshchenko wrote: [...] > For me personally it is useful, because i have around 140 NAS > servers, and i give each of them /24 "gray" subnets, and in some > cases i need to handle bad users, that are changing dynamic ip and > attacking from new ip each time. I just block non-critical service > for whole subnet then, till technician on duty will solve issue > completely. And sure if attack are stopped, subnet will be unblocked > "automagically". OK, if you need this, I'm fine with it. > Sure this feature not critical, or "a must", and if code are not > good, it is up to you, if it should be added or not. I didn't say anything about the code yet. E-mail reviewing this will follow. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html