Hi Pablo This attempts to implement the set support via your proposed setter attribute. IOW instead of taking an sreg and replacing the entire label area with whatever is contained therein take a bit number passed in from userspace and set only that one bit. So ct label set foo will really mean 'set the foo bit in the label area', just like iptables -m connlabel --label foo --set I'm sure that there are better ways to implement the expr <-> attr conversion, see patch #3. Comments welcome, I'll respin it once -next is open again. Thanks, Florian -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html