On Fri, 2006-08-04 at 12:06 +0200, Patrick McHardy wrote:
Balazs Scheidler wrote:
The use-case is as follows:
* I have two different subsystems creating interfaces dynamically (for
example pptpd and serial pppd lines, each creating dynamic pppX
interfaces),
* I would like to assign a
Hi,
Since in this scenario userspace is able to determine ppp vs pptp,
could you not also do something like have an inbound_ppp and
inbound_pptp chain, then jump to the appropriate chain depending on
type? If you need per-interface rules, then create an inbound_pppX
chain,
On Wed, 2006-08-02 at 21:08 -0700, Stephen J. Bevan wrote:
Balazs Scheidler writes:
I would like to easily match a set of dynamically created interfaces
from my packet filter rules. The attached patch forms the basis of my
implementation and I would like to know whether something like
On Tue, 2006-08-01 at 21:18 +0200, Sven Schuster wrote:
Hi Phil,
On Tue, Aug 01, 2006 at 11:46:55AM -0700, Phil Oester told us:
Since in this scenario userspace is able to determine ppp vs pptp,
could you not also do something like have an inbound_ppp and inbound_pptp
chain, then jump
On Tue, 2006-08-01 at 11:29 -0700, Stephen Hemminger wrote:
On Tue, 01 Aug 2006 19:10:09 +0200
Balazs Scheidler [EMAIL PROTECTED] wrote:
Hi,
I would like to easily match a set of dynamically created interfaces
from my packet filter rules. The attached patch forms the basis of my
* Balazs Scheidler wrote, On 02/08/06 08:04:
On Tue, 2006-08-01 at 21:18 +0200, Sven Schuster wrote:
as this would require the complete chain (say, INPUT or
OUTPUT) to be downloaded to userspace, modified and then again
uploaded to the kernel. At least until iptables redesign to
allow
Balazs Scheidler writes:
I would like to easily match a set of dynamically created interfaces
from my packet filter rules. The attached patch forms the basis of my
implementation and I would like to know whether something like this is
mergeable to mainline.
[snip]
The implementation:
Hi,
I would like to easily match a set of dynamically created interfaces
from my packet filter rules. The attached patch forms the basis of my
implementation and I would like to know whether something like this is
mergeable to mainline.
The use-case is as follows:
* I have two different
On Tue, Aug 01, 2006 at 07:10:09PM +0200, Balazs Scheidler wrote:
Each interface can belong to a single group at a time, an interface
comes up without being a member in any of the groups.
Userspace can assign interfaces to groups after being created, this
would typically be performed in