Re: ipt_time fixes (resend, sorry)

[Samuel Jean <sj-netfilter@cookinglinux.org>]

Krzysztof Oledzki wrote:
> I'm not sure if adding a negation-like-workaround to ipt_time (and 
> possible other matches like ipt_limit) is a good idea.

Obviously, I would need to peek at the code to continue following this 
thread. However, my brain is already spinning on other codes.

> My qestion is: 
> why we cannot simply negate all matches?

I guess it would confuse the user when the match uses multiple options.
Am confused just thinking about it :)

But am also in the favor that all matches should accept and behave the 
right way with negation unless negation really doesn't make sense nor 
does anything usefull.

Maybe I missed a match that really doesn't make sense with negation.
(I surely did)

> 
> 
> Best regards,
> 
>             Krzysztof Olędzki

Cheers,

Samuel