[ANNOUNCE] ipset 2.2.2 released

[ANNOUNCE] ipset 2.2.2 released

[Jozsef Kadlecsik]

Hi,

I'm happy to announce the new version of ipset. The bugs fixed in this
release are

- Jiffies rollover bug in ip_set_iptree reported and fixed by Rob Nielsen
- Compiler warning in the non-SMP case (Marcus Sundberg)
- slab cache names shrunk in order to be compatible with 2.4.* (Marcus
  Sundberg)

New features such that negated set feature or new API elements for better
external module support were postponed to the next release.

You can download the new version from http://ipset.netfilter.org/.

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary

Re: [ANNOUNCE] ipset 2.2.2 released

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 1490 bytes --]

On Wed, Jul 20, 2005 at 11:40:35AM +0200, Jozsef Kadlecsik wrote:
> Hi,
> 
> I'm happy to announce the new version of ipset. The bugs fixed in this
> release are
> 
> - Jiffies rollover bug in ip_set_iptree reported and fixed by Rob Nielsen
> - Compiler warning in the non-SMP case (Marcus Sundberg)
> - slab cache names shrunk in order to be compatible with 2.4.* (Marcus
>   Sundberg)
> 
> New features such that negated set feature or new API elements for better
> external module support were postponed to the next release.

Keep up the good work, Jozsef!

Did you ever think about moving the configuration interface on top of
nfnetlink? 

I was considering to push for a merge ipset at some close point in the
future, but then re-considered it and asked myself whether we should
really introduce any big new subsystems based on the {set,get}sockopt()
based kernel/usrerspace interface.

Yes, it's probably quite a significant amount of work.. but you get all
the benefits, especially regarding extensibility of the data format,
etc.

What's your thought on this?

Cheers,
	Harald

-- 
- Harald Welte <laforge@netfilter.org>                 http://netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]

Re: [ANNOUNCE] ipset 2.2.2 released

[Jozsef Kadlecsik]

Hi Harald,

On Sat, 23 Jul 2005, Harald Welte wrote:

> Did you ever think about moving the configuration interface on top of
> nfnetlink?
>
> I was considering to push for a merge ipset at some close point in the
> future, but then re-considered it and asked myself whether we should
> really introduce any big new subsystems based on the {set,get}sockopt()
> based kernel/usrerspace interface.
>
> Yes, it's probably quite a significant amount of work.. but you get all
> the benefits, especially regarding extensibility of the data format,
> etc.

I'm about to take a long holiday, which will give me plenty of time to
ponder on your suggestion and other issues, like IPv6 support ;-). It
seems some level of rewriting is unavoidable.

Best regards,
Jozsef
-
E-mail  : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
          H-1525 Budapest 114, POB. 49, Hungary