DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=subject:from:to:in-reply-to:references:content-type:date:message-id
         :mime-version:x-mailer:content-transfer-encoding;
        b=PHhQQDdT0P0Cs7gOgPXP7pSYWvZawAJ4jGLWUA6tR/JmmCKMOyz0GIpSq5kkF6xPuz
         dh+PCt7em5SVSWsHa7W7QV2V1HgGYs7YRSql6p73b4Wpjaw8YFdueH8yid6gqqMu0NSE
         jWT56OAEBJmcs62AD38/d2SldRjFDLRCH3Gjg=
Subject: Re: [alpine-devel] l7-filter (was: Ann: Alpine 1.7.29 beta is out)
From: Natanael Copa <natanael.copa@gmail.com>
To: Alpine Developers <alpine-devel@lists.alpinelinux.org>
In-Reply-To: <495553F0.1090406@freemail.gr>
References: <49551EB7.60608@nothome.org>  <495553F0.1090406@freemail.gr>
Content-Type: text/plain
Date: Sat, 27 Dec 2008 09:39:47 +0100
Message-Id: <1230367187.17565.21.camel@nc>
Precedence: list
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit

On Sat, 2008-12-27 at 00:00 +0200, Harry Lachanas wrote:
> Nathan Angelacos wrote:
> >
> > Alpine 1.7.29 beta should hit the mirrors shortly
> >
> 
> Any chance to re-include layer7 support in the kernel ????

Hi,

I'm back from vacation.

I'm looking to it but I have the following feeling:

* it increases maintenece work as the kernel needs to be manually
patched for every new release. The chance is fairly big that patch won't
apply to the grsecured kernel. (havent tried though)

* it might slow us down. If we want/need upgrade to a newer kernel, we
mignt not be able to do so until l7-filter have a patch for the kernel
we want. (looks like latest l7-filter is for 2.6.25 and *hopefully* for
newer kernels)

* it will require that iptables is patched as well.

* there are generally good reason patches are not included in mainline
kernel.

So to sum up, it looks to me that it give me more work and increses risk
that things break.

How about we wait with it and re-evaluate after we got new build env
bootable?

Timo: what do you think about l7-filter?

Thanks!

-nc



---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---