| lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
|
Open Source and information security mailing list archives
| ||
|
Message-ID: <49C0CA1D.7020804@trash.net> Date: Wed, 18 Mar 2009 11:17:01 +0100 From: Patrick McHardy <kaber@...sh.net> To: Varun Chandramohan <varunc@...ux.vnet.ibm.com> CC: Andi Kleen <andi@...stfloor.org>, Netfilter Development Mailinglist <netfilter-devel@...r.kernel.org>, Linux Netdev List <netdev@...r.kernel.org> Subject: Re: [ANNOUNCE]: First release of nftables Varun Chandramohan wrote: > Patrick McHardy wrote: >> Andi Kleen wrote: >>> Are there plans to implement the existing iptables/ipchains/ipfw user >>> interfaces on top of nftables? >>> >> >> I've thought about a "skin" in userspace to parse the iptables syntax >> and convert it to the new syntax. But the kernel won't have a >> compatibility >> interface and I'm not sure yet whether userspace will also be able to >> output >> iptables syntax. ipchains etc. definitely not. >> >> > So, in that case if you are not going to provide a "skin" and that > iptables will be removed eventually. wouldnt it break applications > using iptables? > Sorry for such a basic question, but just curious. Something will have to be done for compatibility, the skin is probably the easiest way. Compatibility on the kernel side would get incredibly ugly, I prefer something in userspace with a longer transition period. But all of this is still quite some time away :) -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists