Re: [PATCH 13/18] Netfilter: Multiport revision with port ranges (replaces "mport")

[Herve Eychenne <rv@wallfire.org>]

On Mon, Jan 10, 2005 at 01:24:11PM +1100, Rusty Russell wrote:

> On Sun, 2005-01-09 at 23:34 +0100, Pablo Neira wrote:
> > bonjour,
> > 
> > Herve Eychenne wrote:
> > 
> > >>(note: didn't update manpage, but then again, wasn't updated with previous
> > >>changes)
> > >>    
> > >>
> > >
> > >Maybe because no one stated what the manpage policy regarding the
> > >new revision system would be?...
> > >When adding every successive revision documentation of every
> > >match/target to the manpage, wouldn't it become severly bloated in the
> > >end?

> You should add the new feature to the manpage.

Yes, let's just hope there won't be too many revisions over time,
because that would certainly confuse the users.  So, we shouln't add
revisions too often as Pablo said, or at least think before doing so.

> The extension should
> then fail with an appropriate message if the version of the kernel does
> not support the option used.

Yes, and add a mecanism in iptables command enabling to know in advance
(before actually trying) if a given revision will work (for third party
software), as well as the list of usable revisions (for third
party again) _and_ available (whether they would actually
work with current kernel or not) revisions (for the user, this time),
ideally.

 Herve

-- 
 _
(°=  Hervé Eychenne
//)
v_/_ WallFire project:  http://www.wallfire.org/