Re: [Xen-devel] [PATCH] vif-common.sh prevent physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING chains for non-bridged traffic is not supported anymore

[Sander Eikelenboom <linux@xxxxxxxxxxxxxx>]

Hello Ian,

Tuesday, November 9, 2010, 7:32:00 PM, you wrote:

> Sander Eikelenboom writes ("Re: [Xen-devel] [PATCH] vif-common.sh prevent 
> physdev match: using --physdev-out in the OUTPUT, FORWARD and POSTROUTING 
> chains for non-bridged traffic is not supported anymore"):
>> Good point, although I don't have a config with an old enough
>> iptables/kernel to test what happens in that case ..

this 
http://git.netfilter.org/cgi-bin/gitweb.cgi?p=iptables.git;a=commit;h=30596a5e7ae8c518a8a0bbf3aa891728e9f9ec1b
 commit allready seems to have the option
it's from 2003...


> On lenny:

> $ iptables --physdev-is-bridged 
> iptables v1.4.2: Unknown arg `(null)'
> Try `iptables -h' or 'iptables --help' for more information.
> $

> What I want to know, though, is what happens if you have a new
> iptables and an old kernel.

> Ian.



-- 
Best regards,
 Sander                            mailto:linux@xxxxxxxxxxxxxx


_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel