Hi Jozsef, On Tue, Jun 05, 2018 at 01:08:29PM +0200, Jozsef Kadlecsik wrote: > Hi Pablo, > > Please pull the next patches for nf-next: > > - Check hook mask for unsupported hooks instead of supported ones in xt_set. > (Serhey Popovych). > - List/save just timing out entries with "timeout 1" instead of "timeout 0": > zero timeout value means permanent entries. When restoring the elements, > we'd add non-timing out entries. Fixes netfilter bugzilla id #1258. > - Limit max timeout value to (UINT_MAX >> 1)/MSEC_PER_SEC due to the negative > value condition in msecs_to_jiffies(). msecs_to_jiffies() should be revised: > if one wants to set the timeout above 2147483, msecs_to_jiffies() sets > the value to 4294967. (Reported by Maxim Masiutin). > - Forbid family for hash:mac sets in the kernel module: ipset userspace tool > enforces it but third party tools could create sets with this parameter. Such > sets then cannot be listed/saved with ipset itself. (Florent Fourcot) These are fixes and net-next is closed, please route them through nf.git. Thanks ! -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
