From mboxrd@z Thu Jan 1 00:00:00 1970 From: Laszlo Attila Toth Subject: [PATCH 0/2] Interface groups Date: Tue, 16 Oct 2007 10:01:40 +0200 Message-ID: <1192521703479-git-send-email-panther@balabit.hu> Cc: Laszlo Attila Toth To: netdev@vger.kernel.org, netfilter-devel@vger.kernel.org Return-path: Received: from www.balabit.hu ([212.92.18.33]:56583 "EHLO lists.balabit.hu" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752213AbXJPIBr (ORCPT ); Tue, 16 Oct 2007 04:01:47 -0400 Message-Id: Sender: netfilter-devel-owner@vger.kernel.org List-Id: netfilter-devel.vger.kernel.org Hello, Different network interfaces can be grouped using the same group ID. With this patch fewer netfilter rules are necessary but it may also be used by routing. The interface group (ifgroup) member of the net_device can be modified via netlink (with iproute2) and it is used in the new 'ifgroup' netfilter match. ip link set eth0 group 4 iptables -A INPUT -m ifgroup --if-group 4 -j ACCEPT -- Laszlo Attila Toth