Re: Difference between match and target

[Andy Whitcroft <apw@shadowen.org>]

--On 25 June 2003 11:10 +0200 Harald Welte <laforge@netfilter.org> wrote:

> btw: you can do this now (having match and target in one kernel module,
> registering as match and target - but this would break iptables
> module-on-demand-loading code).  Where should iptables  know from, that
> when the user specifies '-m foo' it should load a kernel module called
> 'ipt_BAR.o' ?

I guess we could say that this could be placed in the modules 
configuration.  Are not aliases in modules.conf used for exactly this kind 
of thing for instance when probing for eth0?  That said it would add a 
significant maintenance overhead to keep the netfilter specific aliases in 
sync with the kernel.  Given that if you care about 1 page you likely 
should not be using modules anyhow its likely not worth the effort.

Cheers.

-apw