On Wed, 7 Jun 2000, Andi Kleen wrote:
> > > The current kernel infrastructure for packet mangling may still need
> > > some adjustments, but it at least exists. I'm encouraging to consider
> > > VLAN implementation as just a netfilter module.
> >
> > "All the world is an IP net"? How should I run IPX over my VLANs then?
>
> Netfilter is not an IP only thing. It is a generic framework for
> packet mangling. Although currently only IPv4 and IPv6 netfilter
> implementations exist it would be no big problem to add ``raw
> ethernet'' netfilter hooks.
Raw ethernet netfilter hooks, as are IPX netfilter hooks by the way, are
currently a nice blue cloud in the sky.
As we're getting into the architectural purity business anyway, does it
make a whole lot of sense to netfilter on two different protocol levels?
greetings,
Lennert
|