diff options
author | Pablo Neira Ayuso <pablo@netfilter.org> | 2008-11-18 10:33:33 +0100 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2008-11-18 10:33:33 +0100 |
commit | 6d8903cbf33ac10e8e03f884a58e374adc366887 (patch) | |
tree | 23c0ae1222a109b6d91da3377f6e7a91e81a4ce0 /include/network.h | |
parent | d6f1b4be37e97dabb5de2d9ae664ef8afeec37ae (diff) | |
download | conntrack-tools-6d8903cbf33ac10e8e03f884a58e374adc366887.tar.gz conntrack-tools-6d8903cbf33ac10e8e03f884a58e374adc366887.zip |
filter: choose the filtering method via configuration file
This patch changes the current behaviour of the filtering selection.
Up to now, conntrackd has used the kernel version to select the
filtering method based on the following logic: If kernel is >= 2.6.26
we use BSF-based filtering from kernel-space, otherwise, default to
userspace.
However, this filtering method still lacks of IPv6 support and
it requires a patch that got into 2.6.29 to filter IPv6 addresses
from kernel-space. To fix this issue, we default to user-space
filtering and let the user choose the method via the configuration
file.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include/network.h')
0 files changed, 0 insertions, 0 deletions