From: Mr D. F. <mr....@go...> - 2011-06-07 14:31:24
|
> I'm beginning to thing about Shorewall 5.0 a bit; that might be a > reasonable time to change the default, once all of the machinery is in > place to keep the documentation current. > One thing I am hoping you will have available by then is tc support for ipsets (i.e. the ability to include ipsets in tcfilters) - there were a couple of posts last week on the netfilter-dev mailing list with regards to that, so, fingers crossed, it won't be that long before this is implemented. |