Linked by Thom Holwerda on Fri 20th Mar 2009 22:01 UTC, submitted by diegocg
The Netfilter development team's Patrick McHardy has released an alpha version of nftables, a new firewall implementation for the Linux kernel, with a user space tool for controlling the firewall. nftables introduces a fundamental distinction between the user space defined rules and network objects in the kernel: the kernel component works with generic data such as IP addresses, ports and protocols and provides some generic operations for comparing the values of a packet with constants or for discarding a packet.
Thread beginning with comment 354433
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
RE[4]: application-based filtering
by 0brad0 on Sun 22nd Mar 2009 20:35
in reply to "RE[3]: application-based filtering"
Member since:2007-05-05
It's rumoured.. but nobody knows for sure, if they did use a portion of the pf code, it's probably just the rule parsing.
Windows did incorporate elements of BSD sockets into their OS, the kernel side of things is quite different.
:) -- smile, see.. I can be nice.
It isn't rumored at all you moron. Learn how to read a web page.
Member since:
2007-03-14
It's rumoured.. but nobody knows for sure, if they did use a portion of the pf code, it's probably just the rule parsing.
Windows did incorporate elements of BSD sockets into their OS, the kernel side of things is quite different.
:) -- smile, see.. I can be nice.