POMNG patch: "rope" - scriptable match module

POMNG patch: "rope" - scriptable match module

[Chris Lowth]

I'd like to submit the "rope" match module to the team for consideration 
for inclusion in patch-o-matic-ng.

The patch file is 248k (7511 lines) - so I havent attached it to this 
message, but it can be downloaded from
http://www.lowth.com/rope/PomNgPatch

"rope" provides a kernel-level interpreter for a simple scripting 
language which can be used to develop netfilter match modules. The 
language is pre-compiled using a perl script, to produce a binary file 
that is loaded into the kernel using the "iptables" command. The 
language has access to many IP, TCP and UDP packet headers and the data 
payload. It was originally developed for use as a P2P protocol 
identification mechanism, but has wound up being general enough for 
wider use.

Current limitations..
    Works with version 2.4.x kernels - version 2.6 support is coming.
    Doesnt work with SMP kernels - that too is coming.

The website www.lowth.com/rope includes a number of sample scripts, 
language documentation and tutorials - etc.

Chris

Re: POMNG patch: "rope" - scriptable match module

[Toby DiPasquale]

On 12/12/05, Chris Lowth <chris@lowth.com> wrote:
> I'd like to submit the "rope" match module to the team for consideration
> for inclusion in patch-o-matic-ng.
...
> Current limitations..
>     Works with version 2.4.x kernels - version 2.6 support is coming.
>     Doesnt work with SMP kernels - that too is coming.

Why would you submit this to the POM team when it doesn't work on
2.6.x or SMP and 2.4.x is in maintenance mode? I've been tracking your
module for some time and these limitations have persisted. (I
personally have rejected it several times in my own work because of
them) I'm curious: do you think the POM team will fix them for you?

--
Toby DiPasquale
0x636f6465736c696e67657240676d61696c2e636f6d

Re: POMNG patch: "rope" - scriptable match module

[Patrick McHardy]

Chris Lowth wrote:
> I'd like to submit the "rope" match module to the team for consideration 
> for inclusion in patch-o-matic-ng.

There's a pending pomng redesign which will introduce an apt-like
sources.list for fetching patches from external locations, to
ease maintenance for both the netfilter team and the authors of
the patches, so at this point we're not adding new patches.