[PATCH 0/7] nftables: add ct helper set support

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



This series adds initial support to set conntrack helpers via
the nft objref infrastructure.

As -next is closed I will not push this yet since kernel support
is still missing.

Currently only supported attributes are:

type (e.g. "ftp", "sip)
protocol (udp or tcp)
l3proto (ip, ip6).

l3proto is optional, the kernel will infer it from
the family, i.e. in "inet" case kernel will check for both ipv4 and ipv6.

Let me know in case you spot any isses, patches #3 and #5 could already
be pushed to nft master since they are just preparation patches.

--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux