On Tue, May 31, 2016 at 10:23:31AM +0200, Arturo Borrero Gonzalez wrote:
> On 31 May 2016 at 00:41, Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote:
> > This is not yet supported. This requires a small kernel patch to allow
> > inversions in the nft_lookup.c. Then, the little extra code for
> > libnftnl and nft.
> >
> > All tests for this usecase are disabled at the moment.
>
> What is your idea of the implementation?
>
> Perhaps adding NFTA_LOOKUP_FLAGS and also:
> enum nft_lookup_flags {
> NFT_LOOKUP_F_INV = (1 << 0),
> };
Something like that, yes.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
