Re: New API / POM modules to merge.... (was: Unique rule ID?!)

[Sven Anders <anders@anduras.de>]

[-- Attachment #1: Type: text/plain, Size: 1787 bytes --]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Henrik Nordstrom wrote:
|
|> As I read, a new iptables version (1.3?) is comming, don't you think, now
|> is the time to rethink the design and implement (or accept) new features
|> to the API?
|
|
| The API is being redesigned in pkttables.

Is there documentation for the new API available?

|> There are so many interesting new match and target modules in the POM,
|> many are stable and could be taken to the mainline...
|
| Please note that the pom inventory was quite recently discussed on the
| netfilter developer workshop, deciding which of the additions should go
| mainline and which not, with some motivations on each. The summary can
| be found in the workshop notes available in the documentation section of
| the web site.

Interesting list. Nice to see many that useful matches will be merged...

Some question:

~ 1. "TTL or HOPLIMIT: no, it's dangerous"

~    Why? Don't use it, if it's dangerous - or does it crash the kernel?

~ 2. "ipp2p: like string matching, stays in POM"

~    Did not found the "string" match comment. Does it stay here forever?


Regards
~ Sven
- --
~ Sven Anders <anders@anduras.de>

~ ANDURAS service solutions AG
~ Innstraße 71 - 94036 Passau - Germany
~ Web: www.anduras.de - Tel: +49 (0)851-4 90 50-0 - Fax: +49 (0)851-4 90 50-55

Rechtsform: Aktiengesellschaft - Sitz: Passau - Amtsgericht Passau HRB 6032
Mitglieder des Vorstands: Sven Anders, Marcus Junker, Michael Schön
Vorsitzender des Aufsichtsrats: Dipl. Kfm. Karlheinz Antesberger
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFBkOgL5lKZ7Feg4EcRAss3AJ9JC7F4bicJ8glSU6s0YQUJiiqJbQCffVDe
CQem8J0GGmd4Dkpb1BBessk=
=HDYh
-----END PGP SIGNATURE-----