Re: [NEW EXTENSION] Condition Match

[Robin Johnson <robbat2@orbis-terrarum.net>]

Stephane Ouellette wrote:
> To enable the rules, issue:        echo 1 > /proc/net/ipt_condition/quake
> To disable the rules, issue:       echo 0> /proc/net/ipt_condition/quake
Just one suggestion with this, is /proc/net the right part of /proc for this?
/proc/net seems to be statistics reporting only, with /proc/net/sys/ipv{4,6} 
being where options are controlled.

> As of this writing, the condition match module supports only one 
> condition per rule.  I think I will add in a near future the possibility 
> to match on many conditions at the same time, using the syntax:     
> --condition file1,file2,file3. . .
This may be getting somewhat complex, but would it be possible to have binary 
ops on the conditions?
eg: --condition file1 --conditionand file2 etc. But this MIGHT be getting a 
little complex IMHO ;-).

Other than that, it looks like a wonderful idea to be able to turn off/on rules 
as needed.