-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On Mon, Mar 25, 2024 at 12:34:18PM -0000, qubist wrote: > On Mon, 25 Mar 2024 12:45:17 +0100 Marek Marczykowski-Górecki wrote: > > > IMO the main advantage of the single table approach is purely > > port-based rules (UDP or TCP), but the default firewall doesn't have > > many of them. They may be relevant for custom-input chain (but not > > always - sometimes you might want to use IP address in those too), > > and rarely for custom-forward. > > What do you mean? Using an IP address is possible in inet table too.
Yes, but you need separate rules for IPv4 and IPv6 anyway, so the benefit of combined table is minimal. - -- Best Regards, Marek Marczykowski-Górecki Invisible Things Lab -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEhrpukzGPukRmQqkK24/THMrX1ywFAmYBcogACgkQ24/THMrX 1ywrjAf/Uc7SvayVEarHjEKQ9bZDqCPp0+5bOYDFVhSgvLYzVjchku/teYehAtVJ Pe1LMrdeawIDUk2va3VCldS5zpjEoABDG68a2e4AR3QSFbw3pT4QlpH/0FiTOD1j aDjs2INgChAFi0hinw7oDt2H89IFc0ZQcFZhYhYR/3R8oZEJDoMAhazP4cAZnkI+ gaHCuptr0BP8nNVRsj6pjPLm779PD2821uF/jIKZIW+hTuG5xvmIQ9/d0XPvC6th APbkUUzFOeII+D0sHO7F6/SlrBxMV6iqdoUwOG7sWKGUTW5FdgA92/OOOl6vGj8C xllZmVSwKkMedB41HnMkS5eLHiB+IA== =LcEW -----END PGP SIGNATURE----- -- You received this message because you are subscribed to the Google Groups "qubes-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-devel+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-devel/ZgFyiPSajbxi2wxL%40mail-itl.