I've been playing withe the "latest" ippool and associated modules. It seems a little backwards to me. I would think that one could create an empty pool (much like one creates an empty chain) and then populate it with ippool -A commands (much like one populates iptables the same way). Instead it seems that it wants a fixed-range pool defined, and only allows you to add and delete from that range. (I understand this is a limitation of the "bitmap proof-of-concept"). I've been through the archives and there was a flurry of activity on this topic at the end of March of 2001, with a lot of forward-thinking and good ideas. Wondering if anyone was working on any of that? If not, I'd like to take a stab at some of it (namely the ability to maintain dynamic lists like chains). I'm probably a horrible C programmer these days, as I've been engulfed in Perl for the last few years but I used to be decent at it, and as this is something I really really would like to see efficiently working, I'd be willing to dump some time at the problem. I've checked out the CVS code, and it looks straight forward enough. If anyone has any uncommitted code they'd like to share or commit to CVS that'd be helpful.
-- Matthew Keller Enterprise System Analyst Computing & Technology Services Information Services Division State University of NY at Potsdam Potsdam, NY USA http://mattwork.potsdam.edu/