On Thu, Aug 14, 2008 at 05:02:40AM -0700, Phil Oester wrote:
> On Wed, Aug 13, 2008 at 03:32:24PM +0200, Patrick McHardy wrote:
> > This is getting more and more kludgy, wouldn't it make more sense
> > to move the pkt_type initialisation from the device layer to the
> > protocol layer?
> 
> It would, but that's a large-ish change, and unknown if DaveM would
> support it just to make an iptables match less kludgy.  
> 
> Unfortunately, it doesn't appear this match was tested very thoroughly
> prior to being added to the tree...
> 
> Phil

Any further thoughts on this Patrick?  Longer-term, your plan would help,
but perhaps in the interim we should get this queued up for 2.6.27 so
we have a working match for OUTPUT packets?

Original patch included below.

Phil