Re: patch for iptables

[Massimiliano Hofer <max@nucleus.it>]

On Tuesday 22 August 2006 4:53 pm, Pablo Neira Ayuso wrote:

> The official policy is "do not break backward" :). IHMO, if we want to
> go further with iptables we need to think about providing a netlink API.
>
> For out-of-tree stuff the thing can be different, I have seen breakages
> if it really required it. For example, the string match is not
> compatible with the old and broken match for 2.4.

OK. I will send a backward compatible version in a few hours.
With new things as XT, however, many things may move on the kernel side and 
there's no reason for the userspace build system to meddle in the kernel 
includes.
Maybe we sould just do a non-mandatory check in $KERNEL/.config 
(or /proc/config.gz where available) and just keep a coherent set of includes 
with proper structures and associated version numbers?

-- 
Saluti,
   Massimiliano Hofer
        Nucleus