Christos Zoulas said:

>2. does IPFILTER_COMPAT do anything but ignore the version check? If
>   it only ignores the version check, then I don't think that this is
>   a good idea, because we cannot guarantee that the kernel<->userland
>   api will not change in newly imported versions.

You're right. We should tred carefully here. From the ipfilter mailing list,
Darren seems to be changing things that could effect the api as time goes
by,
-- 
Rick Kelly	rmk@rmkhome.com
		<http://www.rmkhome.com/>
		<http://rkba.rmkhome.com/> - the right to keep and bear arms
		<http://wolf.rmkhome.com/> - firearm forums