Hello! > Just double checking (I think we are saying the same thing), > that using ifindices and requiring refcounting for input_dev means you > have to use __dev_get_by_index() on a per-packet basis.
The third check, I do not follow... You just compare ifindex stored in skb (skb->iif) with ifindex stored in filter, that's all. No refcounting or __dev_get_by_index() is required. If you think that device names are less volatile and prefer to use them, you can use approach of fib_rules.c: names are resolved to indices, when installing a filter and filter hooks netdev notifier to synchronize indices stored in rules. BTW skb->iif is required anyway, right now IP uses rt->rt_iif. If the dependency on source is removed, iif has to move to skb. Alexey - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html