Re: netfilter modules

Claus Rosenberger
Wed, 08 Sep 2004 15:13:07 -0000

> I don''t think so. Integrating support for a new netfilter module
often
> requires rather sugrical changes to the code. The ''policy
match'' changes
> to support Kernel 2.6 native IPSEC is a good example.

hmm, i understand that it doesn''t make sense to include code for
patch-o-matic modules because nobody know what will be changed in the
future. how long patch-o-matic modules are seperated before being included
into the kernel tree? i want to use h323 and in future ct_sync. any other
ideas how it is possible to integrate these things without breaking the
core shorewall code?