Re: list of available matches and targets through /proc

2002-04-19 Thread Zygo Blaxell
In article [EMAIL PROTECTED], Harald Welte [EMAIL PROTECTED] wrote: On Sun, Apr 14, 2002 at 01:02:32AM -0400, Zygo Blaxell wrote: I wonder if there has been some thought to what happens to e.g. a GUI config tool when new options to an iptables module are added. Will there be a

Re: list of available matches and targets through /proc

2002-04-15 Thread Harald Welte
On Sun, Apr 14, 2002 at 01:02:32AM -0400, Zygo Blaxell wrote: In article [EMAIL PROTECTED], Harald Welte [EMAIL PROTECTED] wrote: On Wed, Apr 10, 2002 at 09:36:05PM -0400, Zygo Blaxell wrote: I think that the user-space modules should provide much richer version information than a simple

Re: list of available matches and targets through /proc

2002-04-15 Thread Hervé Eychenne
On Mon, Apr 15, 2002 at 09:33:15PM +0200, Harald Welte wrote: but what is the use of userspace versioning if the kernel doesn't have version information? The userspace would still not know which version of the structure to use when inserting rules to the kernel. Yes, but that's a

Re: list of available matches and targets through /proc

2002-04-11 Thread Patrick Schaaf
In addition to what others have already pointed out, even if you know what modules are available in user and kernel space, you also need to know what each version of these is present, and whatever is talking to all of this has to have detailed knowledge of the relative capabilities of each

Re: list of available matches and targets through /proc

2002-04-11 Thread Harald Welte
On Wed, Apr 10, 2002 at 09:36:05PM -0400, Zygo Blaxell wrote: I think that the user-space modules should provide much richer version information than a simple version number. Simple version numbers are useless if there are multiple maintainers each extending the code in different ways and

Re: list of available matches and targets through /proc

2002-04-10 Thread Harald Welte
On Wed, Apr 10, 2002 at 02:06:24PM +0200, Hervé Eychenne wrote: Yes, but when some existing modules will go into the kernel, some other modules will have been created, waiting for validation. Seems like a never ending story... Well, alternatively we can also stop all new development ;)

Re: list of available matches and targets through /proc

2002-04-10 Thread Hervé Eychenne
On Wed, Apr 10, 2002 at 02:43:57PM +0200, Harald Welte wrote: Yes, but how do you know at runtime that a particular feature (provided by a patch-o-matic module) is usable? by telling the user about the prerequisites and let him apply the necessarry patches. If you tell him to apply a

Re: list of available matches and targets through /proc

2002-04-10 Thread Zygo Blaxell
In article [EMAIL PROTECTED], =?iso-8859-1?Q?Herv=E9?= Eychenne [EMAIL PROTECTED] wrote: Yes, but how do you know at runtime that a particular feature (provided by a patch-o-matic module) is usable? Well... try to use the module and see if it fails? Ugly hack... In addition to what others have