On Sun, 22 Apr 2001, Jean-Sebastien Morisset wrote:
> > BTW, have you received any feedback on your rcf511c4.lrp package? Also,
>
> Nope, not yet. I haven't seen that much enthousiasm for the LRP version of
> rcf. It took quite a few hours to ports all the scripts, so I'm a little
> disappointed. I figure interest will pick-up as people try rcf... :-)
Heh. Guilty. I was planning on playing with it myself, but between Easter,
MIT Flea, and a sudden surprise reorganization announcement that leaves my
career future in doubt about two to four months down the road - not to
mention my own LRP stuffs - I've been slacking off.
> > what is the timetable for a version based on iptables?
>
> After that, it should be fairly easy to have that function use iptables or
> ipchains as necessary. I figure a development version with support for
> iptables will be ready in 1-2 months.
That would be extra-special-nice. Keep us informed, we eagerly await.
> Although rcf uses ipchains, I've heard it beats out most of the iptables
> scripts currently available. Since linux 2.4.x can use ipchains, there
> isn't a _huge_ rush to port right away. :-)
If rcf was an LRP-only project, I'd disagree strongly. As it stands,
you're right - most of the people using rcf are able to do both.
Unfortunately, I'm beginning to think that IPChains/ipfwadm support are
the culprit behind why my further kernel development is bombing. Well, not
bombing, just giving unexpected results.
Most everyone saw that I was able to get a 474/411K standard/UPX'd kernel
a few days back. So I went back in, and based on the fact that I'm looking
to go for two separate kernels - one straight Ethernet Router, one Tinker
setup - I pulled even MORE Useless Stuff(tm) out of the kernel, then
compiled all the netfilter stuff as modules, including the IPChains and
ipfwadm compatibility modules. Result?
-rw-r--r-- 1 wolfstar root 527k Apr 22 16:17 bzImage
I didn't even bother with compressing it. I know I didn't accidentally
leave stuff in, since I was using the same config file and yanking from
there.
Tomorrow - Later today for most of you, as I'm about to go to bed and it's
6:30am EDT right now - I'm going to go ahead and kill out the
IPChains/ipfwadm stuff and see where that gets me. Hopefully, I'll come
out ahead of the game.
--
George Metz
Commercial Routing Engineer
[EMAIL PROTECTED]
"We know what deterrence was with 'mutually assured destruction' during
the Cold War. But what is deterrence in information warfare?" -- Brigadier
General Douglas Richardson, USAF, Commander - Space Warfare Center
_______________________________________________
Leaf-devel mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/leaf-devel