Re: [ovs-dev] [PATCH] debian: Do not change iptables rules by default.

2012-07-18 Thread Ben Pfaff
On Mon, Jul 16, 2012 at 04:57:48PM -0700, Ben Pfaff wrote: > On Fri, Jul 13, 2012 at 02:19:10PM +0900, Simon Horman wrote: > > On Thu, Jul 12, 2012 at 09:48:34PM -0700, Ben Pfaff wrote: > > > On Fri, Jul 13, 2012 at 01:46:39PM +0900, Simon Horman wrote: > > > > On Thu, Jul 12, 2012 at 09:17:11PM -0

Re: [ovs-dev] [PATCH] debian: Do not change iptables rules by default.

2012-07-16 Thread Ben Pfaff
On Fri, Jul 13, 2012 at 02:19:10PM +0900, Simon Horman wrote: > On Thu, Jul 12, 2012 at 09:48:34PM -0700, Ben Pfaff wrote: > > On Fri, Jul 13, 2012 at 01:46:39PM +0900, Simon Horman wrote: > > > On Thu, Jul 12, 2012 at 09:17:11PM -0700, Ben Pfaff wrote: > > > > Debian kernel maintainer Bastian Blan

Re: [ovs-dev] [PATCH] debian: Do not change iptables rules by default.

2012-07-12 Thread Simon Horman
On Thu, Jul 12, 2012 at 09:48:34PM -0700, Ben Pfaff wrote: > On Fri, Jul 13, 2012 at 01:46:39PM +0900, Simon Horman wrote: > > On Thu, Jul 12, 2012 at 09:17:11PM -0700, Ben Pfaff wrote: > > > Debian kernel maintainer Bastian Blank writes, at > > > http://bugs.debian.org/680537: > > > > > >The

Re: [ovs-dev] [PATCH] debian: Do not change iptables rules by default.

2012-07-12 Thread Ben Pfaff
On Fri, Jul 13, 2012 at 01:46:39PM +0900, Simon Horman wrote: > On Thu, Jul 12, 2012 at 09:17:11PM -0700, Ben Pfaff wrote: > > Debian kernel maintainer Bastian Blank writes, at > > http://bugs.debian.org/680537: > > > >The netfilter rules are a shared resource. There is no synchronization, > >

Re: [ovs-dev] [PATCH] debian: Do not change iptables rules by default.

2012-07-12 Thread Simon Horman
On Thu, Jul 12, 2012 at 09:17:11PM -0700, Ben Pfaff wrote: > Debian kernel maintainer Bastian Blank writes, at > http://bugs.debian.org/680537: > >The netfilter rules are a shared resource. There is no synchronization, >so the admin have the last word. As kernel maintainer, I see it simila

[ovs-dev] [PATCH] debian: Do not change iptables rules by default.

2012-07-12 Thread Ben Pfaff
Debian kernel maintainer Bastian Blank writes, at http://bugs.debian.org/680537: The netfilter rules are a shared resource. There is no synchronization, so the admin have the last word. As kernel maintainer, I see it similar to a configuration file, so ยง10.7 policy applies. The purpos