No traction on default verdicts?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



So like a year ago I mentioned that being able to put a default verdict into a verdict map would be super helpful. Some interest was shown, but it didn't happen.

Clearly it doesn't have any meaning for other kinds of sets where you are matching a value as a truth-test, but for verdicts it's potentially a big deal.


So something like this contrived example

ip protocol { tcp: jump tcp_tests,
              udp: jump udp_tests,
                :: jump ip_sanitizer }

Now you can kind-of work around this with an intermediary chain that uses gotos, but it's ugly. jumping to a goto block so that the final chains can return to the origin around the dispatcher is pretty meh.


ip jump indirection_chain

chain indirection_chain {
ip protocol { tcp: goto tcp_tests,
              udp: goto udp_tests }
ip goto ip_sanatizer
}

So doable, but gross.



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux