From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: [PATCH] LOCAL_IN support for owner match Date: Thu, 27 Mar 2003 15:02:14 +0100 Sender: netfilter-devel-admin@lists.netfilter.org Message-ID: <3E830466.6010001@trash.net> References: <3E81B60F.1000609@trash.net> <20030327131241.GF25471@sunbeam.de.gnumonks.org> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Cc: marc@mbsi.ca, Netfilter Development Mailinglist Return-path: To: Harald Welte In-Reply-To: <20030327131241.GF25471@sunbeam.de.gnumonks.org> Errors-To: netfilter-devel-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Unsubscribe: , List-Archive: List-Id: netfilter-devel.vger.kernel.org Harald Welte wrote: >After a quick read through the code, it seems like your implementation >works only for udp and tcp sockets. > >In this case, you should make sure that the owner match in INPUT can >only be used if the match did contain '-p udp' or '-p tcp'. > > i assumed the original owner match would only work with tcp/udp, too. after the discussion about raw sockets i guess it does also work with raw sockets. would it be acceptable to extend it further to work with raw-sockets, too ? Regards, Patrick