On Thu, Mar 29, 2018 at 05:03:35PM +0300, Kirill Tkhai wrote: > Register netdevice notifier for every iptable entry > is not good, since this breaks modularity, and > the hidden synchronization is based on rtnl_lock(). > > This patch reworks the synchronization via new lock, > while the rest of logic remains as it was before. > This is required for the next patch. > > Tested via: > > while :; do > unshare -n iptables -t mangle -A OUTPUT -j TEE --gateway 1.1.1.2 --oif lo; > done > > Signed-off-by: Kirill Tkhai <ktkhai@xxxxxxxxxxxxx> Acked-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html