On Mon, Feb 27, 2017 at 04:02:48PM +0100, Florian Westphal wrote: > This series adds initial support to set conntrack helpers via > the nft objref infrastructure. > > As -next is closed I will not push this yet since kernel support > is still missing. > > Currently only supported attributes are: > > type (e.g. "ftp", "sip) > protocol (udp or tcp) > l3proto (ip, ip6). > > l3proto is optional, the kernel will infer it from > the family, i.e. in "inet" case kernel will check for both ipv4 and ipv6. > > Let me know in case you spot any isses, patches #3 and #5 could already > be pushed to nft master since they are just preparation patches. Series looks good, thanks Florian. Acked-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html