Florian Westphal <fw@xxxxxxxxx> wrote: > The dummy ruleset I used to test the original validation change was broken, > most rules were unreachable and were not tested by mark_source_chains(). ... I will send a v3 to also include arptables. I thought arptables was irrelevant since arptable rulesets are usually very small but I forgot about DoS angle (we use single mutext for all net nsamespaces). -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
