Re: [libvirt] [PATCH] nwfilter: reorder match extensions relative to state match

14 Feb 2011


      On 02/14/2011 11:42 AM, Eric Blake wrote:
...
On 02/14/2011 08:07 AM, Stefan Berger wrote:
...
This patch reorders the connlimit and comment match extensions relative
to the state match (-m state); connlimit being most useful if found
after a -m state --state NEW and not before it.
Signed-off-by: Stefan Berger<stefanb@linux.vnet.ibm.com>
---
  src/nwfilter/nwfilter_ebiptables_driver.c |   38
++++++++++++++++++++++++++++--
  1 file changed, 36 insertions(+), 2 deletions(-)
ACK.  I think this is low enough risk to include in 0.8.8.
Pushed.

   Stefan