Re: Merge of iptables 'fuzzy', 'random' and 'nth' match

Re: Merge of iptables 'fuzzy', 'random' and 'nth' match

[Hime Junior]

Dear friends:

 I think that "ipt_statistical" is not adequate for a container of the fuzzy match , taking into account that Fuzzy Logic is a branch of the so called Soft Computing or Computational Intelligence , not Statistics .
 There is a statistical flavor in the implementation of the fuzzy patch indeed , but only for design reasons - it could be made without any statistical tools .
 So , I ask you to keep the decision to include the fuzzy match in the new kernel but as a standalone module - for the best of my knowledge , iptables 
is the only "fuzzified" firewall in existence today , and I intend to do additional work to provide more code using FL techniques . I just had no time to do that, but I´m going to ...
 
 Thank you very much !

----- Original Message -----
From: Harald Welte <laforge@netfilter.org>
Date: Sun, 24 Aug 2003 09:21:58 +0200 
To: hime@engineer.com, fabrice@netfilter.org, rwagner@cloudnet.com
Subject: Merge of iptables 'fuzzy', 'random' and 'nth' match

> At the netfilter developer workshop, it was decided that we would like
> to include the functionality of the fuzzy, random and nth match into the
> upcoming 2.6 mainstream kernel.
> 
> However, it is doubtful that each of those three features really need 
> their own module.
> 
> We'd like to ask you to merge the three modules into one
> ipt_statistical.c module, that can be used in 'nth', 'random' or 'fuzzy'
> mode.
> 
> If you would work together on this issue (or one of you wants to take up
> this job), I would be very happy to submit the result for kernel
> inclusion.
> 
> [btw: the same goes for the IPv6 counterpart - but that 'port' can
> follow later on]
> 
> Thanks.
> 
> -- 
> - Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
> ============================================================================
>   "Fragmentation is like classful addressing -- an interesting early
>    architectural error that shows how much experimentation was going
>    on while IP was being designed."                    -- Paul Vixie




                    Hime Junior
            ___________________________
  
          Electronic and Control Engineer


-- 
__________________________________________________________
Sign-up for your own personalized E-mail at Mail.com
http://www.mail.com/?sr=signup

CareerBuilder.com has over 400,000 jobs. Be smarter about your job search
http://corp.mail.com/careers

Merge of iptables 'fuzzy', 'random' and 'nth' match

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 1039 bytes --]

At the netfilter developer workshop, it was decided that we would like
to include the functionality of the fuzzy, random and nth match into the
upcoming 2.6 mainstream kernel.

However, it is doubtful that each of those three features really need 
their own module.

We'd like to ask you to merge the three modules into one
ipt_statistical.c module, that can be used in 'nth', 'random' or 'fuzzy'
mode.

If you would work together on this issue (or one of you wants to take up
this job), I would be very happy to submit the result for kernel
inclusion.

[btw: the same goes for the IPv6 counterpart - but that 'port' can
follow later on]

Thanks.

-- 
- Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]