| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Date: Tue, 20 Nov 2007 14:52:12 +0100 From: Laszlo Attila Toth <panther@...abit.hu> To: Jan Engelhardt <jengelh@...putergmbh.de> CC: David Miller <davem@...emloft.net>, Patrick McHardy <kaber@...sh.net>, netdev@...r.kernel.org, netfilter-devel@...r.kernel.org Subject: Re: [PATCHv6 0/3] Interface group patches Jan Engelhardt írta: > On Nov 20 2007 14:14, Laszlo Attila Toth wrote: >> This is the 6th version of our interface group patches. >> >> The interface group value can be used to manage different interfaces >> at the same time such as in netfilter/iptables. > > I take it you could not use...? > iptables -i iif1 -j dosomething > iptables -i iif2 -j dosomething This kind of usage requires static interface names. But there are dynamic interfaces such as ppp, where the actual name is not always known or sometimes they exist sometimes not. It is difficult to use iptables this way, and every ifup/ifdown requires change in the iptables ruleset (donwload it, modify and upload to the kernel). It may be too slow. > >> The netfilter patch >> is ready but future plan is the same for ip/tc commands (except >> the ifgroup value change which happens via "ip link set" command). > > How can it be useful in conjunction with tc? jamal wrote it previously: http://marc.info/?l=linux-netdev&m=119253403415810&w=2 -- Attila - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists