On Mon, Jan 06, 2014 at 02:02:55PM +0100, Kristian Evensen wrote: > Yes, that sounds like a better solution. I will get started on adding > this functionality. One question though, how should we deal with the > masks? Based on my limited understanding, it is only possible to store > one value per meta key. Please, check the bitwise expression (net/netfilter/nft_bitwise.c), it provides an instruction to perform bitwise operations. > Also, what would be the preferred syntax? When looking at the existing > meta set/get, I suggest something like the following: > > ... meta connmark set X > ... meta connmark-restore > ... meta connmark-save. Unless someone else come with a better syntax proposal, that's fine with me. P.S: Please, don't top post: http://www.netfilter.org/mailinglists.html#list-rules -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
