Subject: Re: [PATCH 00/09]IPtablestng/Kernel - New Framework For IPtables

From: Patrick McHardy <[email-masked]>
Date: Tue, 28 Oct 2008 13:30:11 +0100

Evgeniy Polyakov wrote:
> On Tue, Oct 28, 2008 at 01:07:38PM +0100, Patrick McHardy ([email-masked]) wrote:
>> I think these patches are a lost cause. Besides the fact that they
>> move things to the kernel instead of to userspace, they
> 
> What about part which replaces rules array with a list?
> That's the main part I was interested in though.

Thats also the part that breaks userspace compatibility and requires
to move a lot of userspace code to the kernel, at least in that
design. Its not possible to do this with iptables without breaking
userspace compability.