Re: [PATCH] goto port to ipv6

[Patrick McHardy <kaber@trash.net>]

Henrik Nordstrom wrote:
> From what I remember the patch is very non-intrusive and shouldn't cost 
> 
> more than tree more instruction bytes in the kernel.. Only note of 
> caution is that I don't remember if old kernels rejects rulesets with 
> goto or silently accepts the goto as a jump. I think it is silently 
> accepted reading the goto as a jump, but hopefully the ruleset is 
> rejected when the kernel does not support goto (depends on how good the 
> iptables kernel verifies the content of the flags field)

It verifies that all unknown bits are set to 0, so old kernels should
reject rulesets with goto.

Regards
Patrick