On Mon, Jul 21, 2008 at 07:01:32PM +0200, Patrick McHardy wrote: > Alexey Dobriyan wrote: >> Only for testing. > > Thanks for posting this, I'll try to get this reviewed and > merged before the merge window closes. > > Just one question since this patch is marked DO NO APPLY - > are the remaining patches meant for applying? Yes! Let's ask Den about this particular patch, though. :-) > Is there any further work left until netfilter is fully namespace aware? We discussed this in "unlock iptables in netns" thread http://marc.info/?l=linux-netdev&m=121311890005554&w=2 With this patchset conntracking and NAT are largely netns-ready (I hope), the list shrinks. ebtable_filter ebtable_nat selinux decnet IPv6 REJECT + several individual matches/etc As for other stuff, conntrack statistics (trivial) ctnetlink (stubbed to init_net, dunno what it is) NF_LOG, NF_QUEUE (deprecated? don't bother at all?) grep init_net -w -n -r net/netfilter/ net/ipv4/netfilter/ net/ipv6/netfilter/ shows more or less what works, and what doesn't. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html