Re: is there any plan to support BSD accept filter?

[KyoungSoo Park <kyoungso@xxxxxxxxxxxxxxxx>]

yes. I agree that maybe an ugly hack to put that in the kernel.
What I want to do is to support such feature leaving as little footprint
as possible in the kernel, but specify whatever flexible policy you want
in the user level. 
I'm not sure netfilter module is the right place because it seems I need 
to do packet by packet processing, but I want to deal with a little higher
level than that as a start. (I'm not familar with netfilter, so please correct
me if I'm wrong.)

Anyway, thanks for your response.

KyoungSoo


Stephen Hemminger wrote:

> If you want to do these kind of stateful hacks, why not build a
> netfilter module to do it?
>
>
>