iptables: handle IPT_RETURN from user target]
PATCH 1/1 iptables: handle IPT_RETURN from user target]
Quoted 2 lines · Patric McHardy
And what module will be using this?
--
Currently there's no such module in the src tree. I've encountered the problem myself when I needed to write a proprietary module for the company I work for. I've seen prev posts on the subject as well.
hd.
Quoted 8 lines · Haim Daniel
Quoted 2 lines · Patric McHardy
And what module will be using this?
--Currently there's no such module in the src tree. I've encountered the problem myself when I needed to write a proprietary module for the company I work for. I've seen prev posts on the subject as well.
You'll have to carry this patch yourself. Until we need it for something in the mainline tree, there's no reason to change it.
I posted this patch before. I am glad to see someone has the same requirement as me. It is useful when implementing ACL. Such as these statements:
if (x_cond) {
do_x;
} else if (y_cond) {
do_y;
} else if (z_cond) {
do_z;
}
Because the current iptables doesn't support multi-targets, we have to do this kinds of things in a dirty way.
Quoted 21 lines · Patrick McHardy
Quoted 11 lines · Haim Daniel
Quoted 2 lines · Patric McHardy
And what module will be using this?
--Currently there's no such module in the src tree. I've encountered the problem
myself when I needed to write a proprietary module for the company I work for.
I've seen prev posts on the subject as well.You'll have to carry this patch yourself. Until we need it for something in the mainline tree, there's no reason to change it.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to [email protected]
More majordomo info at http://vger.kernel.org/majordomo-info.html
Signature · 2 lines
Regards， Changli Gao([email protected])
Quoted 7 lines · Changli Gao
I posted this patch before. I am glad to see someone has the same requirement as me. It is useful when implementing ACL. Such as these statements:
if (x_cond) { do_x; } else if (y_cond) {
Quoted 7 lines
do_y;
} else if (z_cond) {
do_z;
}Because the current iptables doesn't support multi-targets, we have to do this kinds of things in a dirty way.
We don't add changes that are not needed in the mainline kernel itself. I'm not interested in this change until someone also posts a patch to actually make use of it.