Re: [patch] RFC: matching interface groups

2006-08-07 Thread Balazs Scheidler
On Fri, 2006-08-04 at 12:06 +0200, Patrick McHardy wrote: Balazs Scheidler wrote: The use-case is as follows: * I have two different subsystems creating interfaces dynamically (for example pptpd and serial pppd lines, each creating dynamic pppX interfaces), * I would like to assign a

Re: [patch] RFC: matching interface groups

2006-08-03 Thread Gerd v. Egidy
Hi, Since in this scenario userspace is able to determine ppp vs pptp, could you not also do something like have an inbound_ppp and inbound_pptp chain, then jump to the appropriate chain depending on type? If you need per-interface rules, then create an inbound_pppX chain,

Re: [patch] RFC: matching interface groups

2006-08-03 Thread Balazs Scheidler
On Wed, 2006-08-02 at 21:08 -0700, Stephen J. Bevan wrote: Balazs Scheidler writes: I would like to easily match a set of dynamically created interfaces from my packet filter rules. The attached patch forms the basis of my implementation and I would like to know whether something like

Re: [patch] RFC: matching interface groups

2006-08-02 Thread Balazs Scheidler
On Tue, 2006-08-01 at 21:18 +0200, Sven Schuster wrote: Hi Phil, On Tue, Aug 01, 2006 at 11:46:55AM -0700, Phil Oester told us: Since in this scenario userspace is able to determine ppp vs pptp, could you not also do something like have an inbound_ppp and inbound_pptp chain, then jump

Re: [patch] RFC: matching interface groups

2006-08-02 Thread Balazs Scheidler
On Tue, 2006-08-01 at 11:29 -0700, Stephen Hemminger wrote: On Tue, 01 Aug 2006 19:10:09 +0200 Balazs Scheidler [EMAIL PROTECTED] wrote: Hi, I would like to easily match a set of dynamically created interfaces from my packet filter rules. The attached patch forms the basis of my

Re: [patch] RFC: matching interface groups

2006-08-02 Thread Amin Azez
* Balazs Scheidler wrote, On 02/08/06 08:04: On Tue, 2006-08-01 at 21:18 +0200, Sven Schuster wrote: as this would require the complete chain (say, INPUT or OUTPUT) to be downloaded to userspace, modified and then again uploaded to the kernel. At least until iptables redesign to allow

[patch] RFC: matching interface groups

2006-08-02 Thread Stephen J. Bevan
Balazs Scheidler writes: I would like to easily match a set of dynamically created interfaces from my packet filter rules. The attached patch forms the basis of my implementation and I would like to know whether something like this is mergeable to mainline. [snip] The implementation:

[patch] RFC: matching interface groups

2006-08-01 Thread Balazs Scheidler
Hi, I would like to easily match a set of dynamically created interfaces from my packet filter rules. The attached patch forms the basis of my implementation and I would like to know whether something like this is mergeable to mainline. The use-case is as follows: * I have two different

Re: [patch] RFC: matching interface groups

2006-08-01 Thread Phil Oester
On Tue, Aug 01, 2006 at 07:10:09PM +0200, Balazs Scheidler wrote: Each interface can belong to a single group at a time, an interface comes up without being a member in any of the groups. Userspace can assign interfaces to groups after being created, this would typically be performed in