Re: [ANNOUNCE] ipset 6.13 released

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Sun, 1 Jul 2012, Mr Dash Four wrote:

> > Call it a bug, whatever. I won't change the meaning of src/dst for
> > hash:net,iface which then will break someone's working firewall after an
> > upgrade.
> >   
> In other words, you are not only intent on keeping this bug in the
> netfilter/kernel code, but willing to document it in a man page simply because
> of the remote possibility that someone somewhere may have been using
> hash:net,iface and decided to upgrade while not willing to change its
> configuration to put right something which was wrong in the first place?

Yes. You argue the meaning of a keyword. The meaning is well documented in 
the manpage, but it's totally counter-intuitive for you. Changing the 
meaning might break working firewalls. Therefore the meaning won't be 
changed.

Best regards,
Jozsef
-
E-mail  : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux