Re: condition for 2.6.16

[Patrick McHardy <kaber@trash.net>]

Massimiliano Hofer wrote:
> On Thursday 20 April 2006 8:49 pm, Patrick McHardy wrote:
> 
>>We have already decided that the condition match will not be merged
>>because the same thing can easily be done by adding/removing rules
>>from userspace.
> 
> 
> Sorry, I missed that discussion.

It was discussed at the netfilter workshops, summaries are available at
workshop.netfilter.org.

> Is it still possible to include it in the external patches?

You can set up a pomng repository and send us the URL to include in
the sources.list file once we finish the pomng reorganization.

> Anyway I think condition allows for a much more elegant solution in cases 
> where adding and removing rules would lead to a messy and unpredictable 
> sequence of overlapping rules, not to mention races between different 
> modifications.
> Just my humble opinion.


Thats true, mainly because were missing a better kernel-userspace
interface and better userspace tools. This is also the reason
why we don't want to include it, its just a workaround for these
problems.