Hi folks, The unclean match has been around for quite a long time. All known bugs have been fixed 3 or 4 months ago. This match is used by a wide range of people and is often considered as very useful. Therefore, I propose to remove its "experimental status". As I've fixed previous bugs, I am ready to address potential new issues and user requests (such as those posted recently in the user list).
Here is the (trivial) tested patch which does the job diff -uNr linux-2.4.18-vanilla/net/ipv4/netfilter/Config.in linux/net/ipv4/netfilter/Config.in --- linux-2.4.18-vanilla/net/ipv4/netfilter/Config.in Mon Feb 25 20:38:14 2002 +++ linux/net/ipv4/netfilter/Config.in Tue Mar 5 14:36:11 2002 @@ -28,8 +28,8 @@ if [ "$CONFIG_IP_NF_CONNTRACK" != "n" ]; then dep_tristate ' Connection state match support' CONFIG_IP_NF_MATCH_STATE $CONFIG_IP_NF_CONNTRACK $CONFIG_IP_NF_IPTABLES fi + dep_tristate ' Unclean match support' CONFIG_IP_NF_MATCH_UNCLEAN +$CONFIG_IP_NF_IPTABLES if [ "$CONFIG_EXPERIMENTAL" = "y" ]; then - dep_tristate ' Unclean match support (EXPERIMENTAL)' CONFIG_IP_NF_MATCH_UNCLEAN $CONFIG_IP_NF_IPTABLES dep_tristate ' Owner match support (EXPERIMENTAL)' CONFIG_IP_NF_MATCH_OWNER $CONFIG_IP_NF_IPTABLES fi # The targets -- Guillaume Morin <[EMAIL PROTECTED]> <Overfiend> canard: thanks