Re: childlevel's pom comment

[Patrick McHardy <kaber@trash.net>]

Hi Mathew,

I'm going to add your updated help-text. But I have doubts about
whether a new match is required at all. A connection can only have
a childlevel of one because only masters have helpers assigned to
them, although in theory the expect-function could register more
expectations. So you can basically match if a connection was
expected or not. The same can also be achieved by a trivial change
to the helper match, just allow zero-string length and use them
as a special value. This should also allow full userspace
compatibility. What do you think ?

Regards
Patrick


quadong@users.sourceforge.net wrote:
> Hi, I noticed that the childlevel patch currently has this to say about
> itself in patch-o-matic:
> 
> 	"This adds CONFIG_IP_NF_MATCH_CHILDLEVEL option, which be used to
> 	match the childlevel of a connection."
> 
> I know _I_ would be confused if I read this.  Could it be changed to the
> following?
> 
> 	This patch allows you to match on the childlevel of a connection.
> 	A master connection, such as the command stream of FTP, has a
> 	childlevel of zero, its first child, such as the data stream of
> 	FTP, has a childlevel of one.  Usage example:
> 
> 	iptables ... -m childlevel --level 1 ...
> 
> Thanks,
> matthew