All of lore.kernel.org
 help / color / mirror / Atom feed
From: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
To: Jan Engelhardt <jengelh@inai.de>
Cc: Victor Julien <lists@inliniac.net>,
	Nick Edwards <nick.z.edwards@gmail.com>,
	netfilter@vger.kernel.org, netfilter-devel@vger.kernel.org
Subject: Re: state match is obsolete 1.4.17
Date: Tue, 15 Jan 2013 14:22:42 +0100 (CET)	[thread overview]
Message-ID: <alpine.DEB.2.00.1301151406540.11172@blackhole.kfki.hu> (raw)
In-Reply-To: <alpine.LNX.2.01.1301151342440.19279@nerf07.vanv.qr>

On Tue, 15 Jan 2013, Jan Engelhardt wrote:

> On Tuesday 2013-01-15 11:06, Jozsef Kadlecsik wrote:
> >> > 
> >> > state is a redundant subset of conntrack (the latter was introduced around
> >> > Linux 2.5.32) and shall go away.
> >> 
> >> I think removing it is a bad idea. For years and years all docs, books,
> >> tutorials and frontends (like my own) have worked with "state". The
> >> change seems so trivial "s/-m state --state/-m conntrack --ctstate/g"
> >> that it would appear keeping "state" around as an alias or compatibility
> >> layer would require minimal effort. Why not keep it around?
> >
> >Actually, I have to agree. Why don't we keep "state" as an alias and 
> >accept the old syntax in "conntrack"?
> 
> state is currently aliased and translated to conntrack in iptables
> if the kernel has it. No scripts are broken.
> 
> If the aliasing is done in userspace, the kernel part can be removed -
> someday maybe.

The aliasing is already done in userspace. One types in "state" and it's 
converted into "conntrack" and that is then sent to the kernel. (So as far 
as I see if the ipt_state, etc module aliases were added to the conntrack 
module, even the state kernel module could be removed.)

However I suggest to delete the obsolete warnings completely from iptables 
and let these cases silently be handled as aliases.

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlecsik.jozsef@wigner.mta.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
          H-1525 Budapest 114, POB. 49, Hungary

  reply	other threads:[~2013-01-15 13:22 UTC|newest]

Thread overview: 21+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2013-01-15  5:09 state match is obsolete 1.4.17 Nick Edwards
2013-01-15  9:11 ` Jan Engelhardt
2013-01-15  9:54   ` Victor Julien
2013-01-15 10:06     ` Jozsef Kadlecsik
2013-01-15 12:06       ` Born Without
2013-01-15 12:49       ` Jan Engelhardt
2013-01-15 13:22         ` Jozsef Kadlecsik [this message]
2013-01-15 13:53           ` Jan Engelhardt
2013-01-15 14:49             ` Jozsef Kadlecsik
2013-01-15 17:28               ` [PATCH]: Keep the "state" match as alias [Re: state match is obsolete 1.4.17] Jozsef Kadlecsik
2013-01-18  0:28                 ` Pablo Neira Ayuso
2013-01-22 21:47                   ` Jozsef Kadlecsik
2013-01-22 21:58                     ` Jan Engelhardt
2013-01-23  9:06                       ` Jozsef Kadlecsik
2013-01-23  3:03                     ` Pablo Neira Ayuso
2013-01-23  9:00                       ` Jozsef Kadlecsik
2013-01-23 10:08                         ` Pablo Neira Ayuso
2013-01-15 23:27   ` state match is obsolete 1.4.17 Nick Edwards
2013-01-16  0:11     ` Jan Engelhardt
2013-01-16  0:11       ` Jan Engelhardt
2013-01-17  4:38       ` Nick Edwards

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=alpine.DEB.2.00.1301151406540.11172@blackhole.kfki.hu \
    --to=kadlec@blackhole.kfki.hu \
    --cc=jengelh@inai.de \
    --cc=lists@inliniac.net \
    --cc=netfilter-devel@vger.kernel.org \
    --cc=netfilter@vger.kernel.org \
    --cc=nick.z.edwards@gmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.