On Tue, Sep 02, 2014 at 11:38:39AM +0200, Pablo Neira Ayuso wrote: > The sets are released from the rcu callback, after the rule is removed > from the chain list, which implies that nfnetlink cannot update the > hashes (thus, no resizing may occur) and no packets are walking on the > set anymore. Unrelated to your patch, but to the RCU destruction: how does that make sure that nfnetlink notifications are received in the proper order? I mean, theoretically a new set with the same name could exist at that time. The same problem exists for all objects that have user defined identifiers or refer to them. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html