xt_recent wants netns inside ->match hook (and xt_hashlimit probably, haven't looked closely): recent_mt recent_table_lookup [use per-netns tables list] Now, I can drag netns through struct xt_match_param, or use dev_net(skb->dev ? skb->dev : skb->dst->dev) trick. And the latter should be better, because only xt_recent module will be affected. Comments? -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
