Subject: Re: Netfilter: New target: RLOG

From: Pablo Neira Ayuso <[email-masked]>
Date: Thu, 19 Jan 2012 10:25:33 +0100

On Thu, Jan 19, 2012 at 10:12:48AM +0100, Pablo Neira Ayuso wrote:
> I still think this can be useful.
> 
> But, why don't you add this to the LOG target as an extension instead
> of yet another target?

By "extension", I meant to say "revision".

If you're not familiar with the iptables revision mechanism, for
instance, have a look at net/netfilter/xt_NFQUEUE.c

Look for the "revision" pattern in that code. Basicaly, it allows you
to enhance existing matches/targets without breaking backward
compatibility.