Hello, Here's a patchset implementing CT features into a nftables modules named ct_set. I've used same technique as my previous work by factoring code in first patch and introducing the new module in second one. libnftables implementation is done and will be attached to this thread. I will work on nft support in the coming days. Patchset statistics: include/net/netfilter/nf_ct_set.h | 137 ++++++++++++++++ include/uapi/linux/netfilter/nf_tables.h | 36 +++++ net/netfilter/Kconfig | 5 + net/netfilter/Makefile | 1 + net/netfilter/nft_ct_set.c | 262 +++++++++++++++++++++++++++++++ net/netfilter/xt_CT.c | 143 +---------------- 6 files changed, 449 insertions(+), 135 deletions(-) BR, -- Eric Leblond -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html