Re: [Fireflier-devel] Re: [PATCH][RFC] Security marking

2006-04-28 Thread Patrick McHardy
Török Edwin wrote: > Patrick what is the status of solving the skfilter issues? Can I help with > testing patches, etc.? Not yet. If nothing gets in between I plan to get the patches ready next week. > On Monday 20 February 2006 18:42, Patrick McHardy wrote: > >>Confirmation of conntrack entri

Re: [Fireflier-devel] Re: [PATCH][RFC] Security marking

2006-04-24 Thread James Morris
On Sun, 23 Apr 2006, Török Edwin wrote: > > This could be done with nfqueue, modular policy and a pretty simple tool. > How do I determine if the policy needs to be changed? I.e. how do I determine > if the packet would be dropped? You say packets are silently dropped, won't > they generate an a

Re: [Fireflier-devel] Re: [PATCH][RFC] Security marking

2006-04-23 Thread Török Edwin
On Tuesday 18 April 2006 04:01, James Morris wrote: > On Mon, 17 Apr 2006, [EMAIL PROTECTED] wrote: > > Secmark, or skfilter is exactly what fireflier needs to solve the shared > > socket issue. Thanks for working on this. If this gets integrated in > > mainline, fireflier LSM will be dropped. > >