There are only two cases that seem relevant
1. Shifting unbound source on a connect() when routing changes. Thats
a nice idea anyway
2. Killing connections on a drop. This potentially violates the RFC
check rules on time wait unless you are very careful. Also tell me
why it cant be done in user space by turning /proc/net/ into a set
of temporary 'reject' filter rules
Alan
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/