From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: TCPMSS is not restricted to mangle table Date: Tue, 03 Jan 2006 12:14:01 +0100 Message-ID: <43BA5C79.9060304@trash.net> References: <4393895D.1020106@trash.net> <20051205004548.GC5617@eychenne.org> <439393C9.5020001@trash.net> <439513E1.3060407@milivojevic.org> <43951DBF.8050001@trash.net> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Netfilter Development Mailinglist Return-path: To: Jan Engelhardt In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Jan Engelhardt wrote: > Since the Linux kernel does not follow the old stable<->devel > (2.even<->2.uneven) model, every new version is allowed to > break an older one. Thats complete nonsense. > On the way to restrict TCPMSS to -t mangle, the -m state > could also be obsoleted in favor of -m conntrack. I'm not going to restrict TCPMSS to mangle - but I'm considering adding a warning. I also don't see a reason to deprecate the state match, its totally trivial code and needs a lot less memory than the conntrack match.