From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> Date: Tue, 11 Mar 2014 10:19:11 +0100 > The following patchset provides a socket filtering alternative to BPF > which allows you to define your filter using the nf_tables expressions. Generally I like this series, but of course you will need to respin it against the work that went into net-next recently. I only wonder about the expression implementation module loading logic when we add an nft filter to a socket. It seems that if the module doesn't exist, we return -EAGAIN, drop the mutex, and retry. I see nothing which breaks this loop, it seems like it can run forever if a module is simply not present. Thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
