Bad plan. As you've probably noticed, the netfilter code in 2.3 is a
radical change from the ipchains stuff in the 2.2 series kernels.
What's there is a good foundation to build on, but neither the kernel
nor the userspace tools are solid yet.
t> We're planning to fall back to 2.2(+ipchains) to see if the
t> performance is better...
Right now, the 2.2 code should both perform better and be more stable.
If you have time to spare to work with the netfilter team on the
problems you're seeing, that would be a big win for shaking out
performance and correctness problems in the 2.3 code.
The netfilter@samba.org mailing list is where you want to go - see
http://netfilter.kernelnotes.org for more details.
<b
-- Let us pray: What a Great System. Please Do Not Crash. ^G^IP@P6- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/