Re: netfilter modules

Tom Eastep
Wed, 08 Sep 2004 15:07:23 -0000

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Claus Rosenberger wrote:

|
|
| do you think that it will be possible in future to include special code
| like a plugin into shorewall? i.e. code for patch-o-matic modules. but
| interfaces between the core shorewall and a plugin system will be needed
| then. do you think it''s possible and realistic?

I don''t think so. Integrating support for a new netfilter module often
requires rather sugrical changes to the code. The ''policy
match'' changes
to support Kernel 2.6 native IPSEC is a good example.

- -Tom
- --
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFBPyArO/MAbZfjDLIRAgChAJsGIgsj3X8js7nnjw9XfE+WaouHAACeJfZC
sW9OEO2KI07xi+a5r05pwfA=i80l
-----END PGP SIGNATURE-----