From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: 2.6.20 support for other 'features' Date: Wed, 11 Apr 2007 19:51:47 +0200 Message-ID: <461D2033.2030508@trash.net> References: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-15 Content-Transfer-Encoding: 7bit Cc: netfilter-devel@lists.netfilter.org To: Mohammad Mohsenzadeh Return-path: In-Reply-To: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org Mohammad Mohsenzadeh wrote: > I have been developing extension for netfilter to allow stateful > firewall and filtering. I was looking at the new api in 2.6.20 and I > was wondering why the number of 'features' allowed is maxed to 4. > > I was thinking of configuration number of features and maybe some way > of setting a default feature to use instead of NF_CT_F_BASIC. This way > the netfilter can easily be extended. I can provide a patch if you > think the above is a good idea. Actually on second thought, I don't think this can even work. The features and the resulting memory layout of struct nf_conn need to be coordinated for all different combinations, so you can at most extend it by one, which would always come at the end.