Am 21.03.2014 20:02, schrieb Florian Weimer: > * Lennart Poettering: > >>> So offer something with equivalent functionality (and config file >>> syntax compatibility), with a nice modern clean API and then systemd >>> and others can be moved over to that 1 by 1, and once we've no more >>> users left we can kill of the old beast ? >> >> Nope. In systemd we already support one subsystem for filtering just >> fine, it's called a firewall. > > Does this subsystem support DNS-based rules?
and even if it does you do *not* want dns-resolution based on packets instead connections - guess how many users would make the mistake resulting in a selfDOS
signature.asc
Description: OpenPGP digital signature
-- devel mailing list devel@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
