Re: [netfilter-core] [RFC] place to put bridge-netfilter specific data in the skbuff

[Harald Welte]

--H83aLI5Lttn3Hg7B
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Oct 24, 2002 at 01:15:12AM -0700, David Miller wrote:
>    From: Harald Welte <[e-mail]>
>    Date: Thu, 24 Oct 2002 10:16:56 +0200
>=20
>    Mh. Since bridging firewall is cool, but not something everybody will
>    use by default [and it adds code as well as enlarges the skb], I think=
 it=20
>    should be a compiletime kernel config option.
>   =20
> This was my initial reaction, but both of us misunderstand what
> is going on I think.

Ok ;)

> If you use bridging, using netfilter on the bridged traffic "is not
> possible" without these bridge-netfilter changes.
>=20
> So he's saying, if we have bridging enable and netfilter, should
> bridge-netfilter be on, and right now I say yes.

Yes, this does perfectly make sense. This is the way to go.

--=20
Live long and prosper
- Harald Welte / [e-mail]               http://www.gnumonks.org/
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D
"If this were a dictatorship, it'd be a heck of a lot easier, just so long
 as I'm the dictator."  --  George W. Bush Dec 18, 2000

--H83aLI5Lttn3Hg7B
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE9t+YKXaXGVTD0i/8RAvTPAJ0dZY/Xuh1OBXawasc6thZP14qDiwCfTf5w
s83d3pVC3gAKvlhwt84pNvU=
=FRvH
-----END PGP SIGNATURE-----

--H83aLI5Lttn3Hg7B--