[Fwd: Re: Re: [PATCH 2.4.37] iptables: handle IPT_RETURN from user target]

[Fwd: Re: Re: [PATCH 2.4.37] iptables: handle IPT_RETURN from user target]

[Haim Daniel]

Patric McHardy wrote:

 > And what module will be using this?
 > --

Currently there's no such module in the src tree. I've encountered the problem
myself when I needed to write a proprietary module for the company I work for.
I've seen prev posts on the subject as well.

hd.

Re: [Fwd: Re: Re: [PATCH 2.4.37] iptables: handle IPT_RETURN from user target]

[Patrick McHardy]

Haim Daniel wrote:
> Patric McHardy wrote:
> 
>  > And what module will be using this?
>  > --
> 
> Currently there's no such module in the src tree. I've encountered the 
> problem
> myself when I needed to write a proprietary module for the company I 
> work for.
> I've seen prev posts on the subject as well.

You'll have to carry this patch yourself. Until we need it for something
in the mainline tree, there's no reason to change it.

Re: [Fwd: Re: Re: [PATCH 2.4.37] iptables: handle IPT_RETURN from user target]

[Changli Gao]

I posted this patch before. I am glad to see someone has the same
requirement as me. It is useful when implementing ACL. Such as these
statements:

if (x_cond) {
   do_x;
} else if (y_cond) {
  do_y;
} else if (z_cond) {
  do_z;
}

Because the current iptables doesn't support multi-targets, we have to
do this kinds of things in a dirty way.

On Thu, Mar 19, 2009 at 1:02 AM, Patrick McHardy <kaber@trash.net> wrote:
> Haim Daniel wrote:
>>
>> Patric McHardy wrote:
>>
>>  > And what module will be using this?
>>  > --
>>
>> Currently there's no such module in the src tree. I've encountered the
>> problem
>> myself when I needed to write a proprietary module for the company I work
>> for.
>> I've seen prev posts on the subject as well.
>
> You'll have to carry this patch yourself. Until we need it for something
> in the mainline tree, there's no reason to change it.
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter-devel"
> in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>



-- 
Regards，
Changli Gao(xiaosuo@gmail.com)

Re: [Fwd: Re: Re: [PATCH 2.4.37] iptables: handle IPT_RETURN from user target]

[Changli Gao]

I posted this patch before. I am glad to see someone has the same
requirement as me. It is useful when implementing ACL. Such as these
statements:

if (x_cond) {
   do_x;
} else if (y_cond) {
  do_y;
} else if (z_cond) {
  do_z;
}

Because the current iptables doesn't support multi-targets, we have to
do this kinds of things in a dirty way.

On Thu, Mar 19, 2009 at 1:02 AM, Patrick McHardy <kaber@trash.net> wrote:
> Haim Daniel wrote:
>>
>> Patric McHardy wrote:
>>
>>  > And what module will be using this?
>>  > --
>>
>> Currently there's no such module in the src tree. I've encountered the
>> problem
>> myself when I needed to write a proprietary module for the company I work
>> for.
>> I've seen prev posts on the subject as well.
>
> You'll have to carry this patch yourself. Until we need it for something
> in the mainline tree, there's no reason to change it.
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter-devel"
> in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>



-- 
Regards，
Changli Gao(xiaosuo@gmail.com)

Re: [Fwd: Re: Re: [PATCH 2.4.37] iptables: handle IPT_RETURN from user target]

[Patrick McHardy]

Changli Gao wrote:
> I posted this patch before. I am glad to see someone has the same
> requirement as me. It is useful when implementing ACL. Such as these
> statements:
> 
> if (x_cond) {
>    do_x;
> } else if (y_cond) {
>   do_y;
> } else if (z_cond) {
>   do_z;
> }
> 
> Because the current iptables doesn't support multi-targets, we have to
> do this kinds of things in a dirty way.

We don't add changes that are not needed in the mainline kernel itself.
I'm not interested in this change until someone also posts a patch to
actually make use of it.