[ANNOUNCE] ipset 2.2.2 released

Harald Welte laforge at netfilter.org
Sat Jul 23 10:00:16 CEST 2005


On Wed, Jul 20, 2005 at 11:40:35AM +0200, Jozsef Kadlecsik wrote:
> Hi,
> 
> I'm happy to announce the new version of ipset. The bugs fixed in this
> release are
> 
> - Jiffies rollover bug in ip_set_iptree reported and fixed by Rob Nielsen
> - Compiler warning in the non-SMP case (Marcus Sundberg)
> - slab cache names shrunk in order to be compatible with 2.4.* (Marcus
>   Sundberg)
> 
> New features such that negated set feature or new API elements for better
> external module support were postponed to the next release.

Keep up the good work, Jozsef!

Did you ever think about moving the configuration interface on top of
nfnetlink? 

I was considering to push for a merge ipset at some close point in the
future, but then re-considered it and asked myself whether we should
really introduce any big new subsystems based on the {set,get}sockopt()
based kernel/usrerspace interface.

Yes, it's probably quite a significant amount of work.. but you get all
the benefits, especially regarding extensibility of the data format,
etc.

What's your thought on this?

Cheers,
	Harald

-- 
- Harald Welte <laforge at netfilter.org>                 http://netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : /pipermail/netfilter-devel/attachments/20050723/d5c52c59/attachment.bin


More information about the netfilter-devel mailing list