Cool thanks! The thing is, we would need to allow a dynamic configuration of the filter chain, but I guess this is out of scope!? However, I'm still wondering why we need those fancy filters in the kernel... What can we do here, that can't be done in userspace? Please also keep in mind, that someone needs to maintain this stuff, even if it goes upstream.
Sven
