[tech] madako and ipsets

[David Adam]

On Sun, 6 May 2007, Adrian Chadd wrote:
> There's two things to do:
>
> * do proper connection marking, so we can pass established flows
>   without having to re-evaluate every rule again, and
> * use something like ip sets in iptables to store the set of
>   freenets ips, not linearly evaluated firewall rulesets.

I think you mean three!

* Throw more hardware at the problem

David Adam
zanchey@