Multiple Address specification or match

Simon Lodal simonl at parknet.dk
Thu Sep 30 19:05:44 CEST 2004


> Is it hard to extend the source and destination match functions to accept
> multiple arguments?

Yes, they are pretty wired into iptables. And I would worry about their 
performance.

But it should be easy to create a new match to do it. There is already 
multiport and mport. The equivalent for addresses should not be hard.


Simon



More information about the netfilter-devel mailing list