* YOSHIFUJI Hideaki / ?$B5HF#1QL@ <[EMAIL PROTECTED]> 2006-10-17 21:17 > In article <[EMAIL PROTECTED]> (at Tue, 17 Oct 2006 13:35:11 +0200), Thomas > Graf <[EMAIL PROTECTED]> says: > > : > > different logic. In order to solve this, rules must be restricted to > > one of these paths, i.e. a rule intending to make certain prefixes > > unreachable may not apply to the source selection logic. This can be > > achieved using the 'reason' field I proposed in my netconf slides, it > > would allow turning the first rule example into > > > > rule add from 2001::1/128 for INPUT unreachable > > > > which would no longer apply when looking up the source address or > > deciding the outgoing route. > > And/or, to take into account input interface, we could do > rule add from 2001::1/128 in eth0 unreachable > maybe.
Right, that works as well but duplicating the rule for every interface is not very practical. Anyways, the point is that the proposed change to modify the source prefix matching logic is not acceptable and other way has to be found. - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html