About matching (also was: Multiple Targets)

Jonas Berlin xkr47 at outerspace.dyndns.org
Sun May 15 11:05:28 CEST 2005


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Quoting Jozsef Kadlecsik on 2005-05-05 06:36 UTC:
> In my opinion cascade targets should return IPT_CONTINUE. They may
> return NF_DROP in error conditions, but other return values are not
> allowed.

Right.

How about hotdrop? I guess it should be checked in the
IPT_TARGET_ITERATE macro?

- --
- - xkr47
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)

iD8DBQFChxDXxyF48ZTvn+4RAnEQAKC6vOY1ucjHWxmUI7TJrFems2gtOACdFWsa
ELwbGpmrNwdcBT1WACkVBKQ=
=d18+
-----END PGP SIGNATURE-----



More information about the netfilter-devel mailing list