patche iptables z patch-o-matic/userspace

[Radoslaw Kojdecki]

On Thu, 11 Dec 2003, Arkadiusz Miskiewicz wrote:
> > Jest ktoś w stanie podać listę funkcji które by zniknęły?
> 1)
> Adds the possibility to change mark of a packet in userspace.
> The ip_queue module is changed and a new function is added to
> libipq to decide and change the mark of a packet.
> 
> This is used by the NuFW project (http://www.nufw.org).
> 
> 2)
> Adds the possibility to send icmp-unreachable messages
> from a fake source IP address. The original destination of the packet will be
> used as the source of the icmp-unreach.
> 
> 3)
> This patch adds support for matching the nfmark bitwise (and & or).
> 
> 4)
>   This option adds a `raw' table to ip6tables. This table is the very
>   first in the netfilter framework and hooks in at the PREROUTING
>   and OUTPUT chains.

Ten patch jest niezbednie potrzebny w dobie blastow i innych wirusisk 
ktore skutecznie przytykaja tablice conntrack o kilkuset tys. pozycji.

> Tyle. Patch 2 jest ciekawy no ale cóż.

Radek
-- 
---------------------------------------------------------------------
Media-Com Sp. z o.o.                       43-100 Tychy, ul. Długa 19
http://www.media-com.com.pl/                    info w media-com.com.pl
---------------------------------------------------------------------