Suggestions regarding multiport match and chain traversing

Norbert Sendetzky norbert@linuxnetworks.de
Wed, 17 Apr 2002 20:13:13 +0200


On Wednesday 17 April 2002 19:47, you wrote:
> I hope you mean the struct you are sending all the data in to the
> kernel. Just make the struct larger. It's not a problem.

Is the struct ipt_mulitport allocated by ip_tables before the=20
functions are called?

> However, make sure the struct looks the same as the old in the
> begining of it. Since old iptables will see it as that, even tho
> running on a newer kernel supporting this.

You mean if I change the struct completly I will run into=20
compatibility problems when using new kernel code, but old userspace=20
code?

What about alignment? I need 62 bytes, but it must probably aligned=20
to 64 bytes. Which part is responible for alignment? Iptables or the=20
module code?


Norbert