Re: nf_conntrack tree

[Patrick McHardy <kaber@trash.net>]

Yasuyuki KOZAKAI wrote:

> Oh, this is bad code. What I really want to do is following.
> Anyway, this issue would be resolved.
> 
>  static struct ipt_match helper_match = {
>  	.name		= "helper",
> -	.match		= &match,
>  	.checkentry	= &check,
>  	.me		= THIS_MODULE,
>  };
>  
>  static int __init init(void)
>  {
> -	need_ip_conntrack();
> +	if (!request_module("ip_conntrack"))
> +		helper_match.match = &ip_match;
> +	} else if (!request_module("nf_conntrack"))
> +		helper_match.match = &nf_match;
> +	} else
> +		return -1;
> +
>  	return ipt_register_match(&helper_match);
>  }

That won't work when nf_conntrack is already loaded. Do you think
it is necessary to allow people to build both as modules? It would
be easier to just force them to choose, and would probably result
in more people actually using it since ip_conntrack wouldn't be used
by default anymore.

Regards
Patrick