ABOUT
Posts Tagged ‘netfilter’
Netfilter Workshop 2010
Among others I’m somewhat involved into Linux Netfilter development because of our Zorp proxy based product. It is that time of the year again that Netfilter developers converge, this time to Seville, thanks to our generous host Pablo Neira. So I may not be that responsive this week, but I’ll definitely check emails and possibly even respond to them if you care to post a feedback on the last syslog-ng release.
Read on the Netfilter Workshop at Eric’s blog at: http://nfws.edenwall.com/en.
Netfilter workshop
I’ve just returned from this year’s Netfilter Developer’s Workshop, this time held in Karlsruhe, Germany. This year’s workshop was the fifth such event, and this time even David S. Miller was there.
All in all the organization was wonderful, kudos to the Astaro guys. We’ve had about 30 attendants, the largest workshop ever. You can read more about the workshop at http://nfws.inl.fr/en/
Krisztian Kovacs and me were trying to push our TProxy4 patches for merging, the future for tproxy seems bright, as everyone was positive.
We also have some other, minor patches in the queue, I’m working on finalizing them and submit them for inclusion. These are:
- SO_MARK socket option to be able to specify the mark field of outgoing packets, generated sent from a given socket
- an extension to the “addrtype” match to limit the match to the incoming interface
- the notion of interface groups, that make it possible to match a group of similar interfaces
As always, it was very nice to meet Netfilter people, let’s hope we meet in Paris next time. 