[PATCHv6 iptables]Interface group match

2007-11-20 Thread Laszlo Attila Toth
Interface group values can be checked on both input and output interfaces with optional mask. Signed-off-by: Laszlo Attila Toth <[EMAIL PROTECTED]> --- extensions/Makefile |2 extensions/libxt_ifgroup.c | 201 +++ extensions/libxt_i

Re: [PATCHv6 iptables]Interface group match

2007-11-23 Thread Lutz Jaenicke
On Tue, Nov 20, 2007 at 02:14:28PM +0100, Laszlo Attila Toth wrote: > Interface group values can be checked on both input and output interfaces > with optional mask. > Index: extensions/libxt_ifgroup.c > === > --- extensions/libxt_ifg

Re: [PATCHv6 iptables]Interface group match

2007-11-29 Thread Laszlo Attila Toth
Lutz Jaenicke írta: On Tue, Nov 20, 2007 at 02:14:28PM +0100, Laszlo Attila Toth wrote: Interface group values can be checked on both input and output interfaces with optional mask. Index: extensions/libxt_ifgroup.c === --- exten

Re: [PATCHv6 iptables]Interface group match

2007-11-29 Thread Patrick McHardy
Laszlo Attila Toth wrote: Lutz Jaenicke írta: On Tue, Nov 20, 2007 at 02:14:28PM +0100, Laszlo Attila Toth wrote: Interface group values can be checked on both input and output interfaces with optional mask. Index: extensions/libxt_ifgroup.c =

Re: [PATCHv6 iptables]Interface group match

2007-11-29 Thread Laszlo Attila Toth
Patrick McHardy írta: Laszlo Attila Toth wrote: Lutz Jaenicke írta: On Tue, Nov 20, 2007 at 02:14:28PM +0100, Laszlo Attila Toth wrote: Interface group values can be checked on both input and output interfaces with optional mask. Index: extensions/libxt_ifgroup.c ==

Re: [PATCHv6 iptables]Interface group match

2007-11-29 Thread Patrick McHardy
Laszlo Attila Toth wrote: Patrick McHardy írta: Laszlo Attila Toth wrote: Lutz Jaenicke írta: Should iptables be allowed to read "/etc/iproute2/rt_ifgroup"? It would be good but cannot be used if a mask is set and only values less than 256 can be used with names. Why 256? I can see no

Re: [PATCHv6 iptables]Interface group match

2007-11-29 Thread Jan Engelhardt
On Nov 29 2007 17:27, Patrick McHardy wrote: > >> The syntax "name/0xmask" is simply too strange for me. > > Then how about name/name with masks also defined in rt_ifgroup? > The same question applies for marks of course. > I would find that confusing, which is why the new xt_TOS only allows names

Re: [PATCHv6 iptables]Interface group match

2007-11-29 Thread Patrick McHardy
Jan Engelhardt wrote: On Nov 29 2007 17:27, Patrick McHardy wrote: The syntax "name/0xmask" is simply too strange for me. Then how about name/name with masks also defined in rt_ifgroup? The same question applies for marks of course. I would find that confusing, which is why the new xt_TOS onl