On Wed, Jun 06, 2018 at 02:09:12PM +0200, Jozsef Kadlecsik wrote: > Hi Pablo, > > Please pull the next patches for nf git tree: > > - Check hook mask for unsupported hooks instead of supported ones in xt_set. > (Serhey Popovych). > - List/save just timing out entries with "timeout 1" instead of "timeout 0": > zero timeout value means permanent entries. When restoring the elements, > we'd add non-timing out entries. Fixes netfilter bugzilla id #1258. > - Limit max timeout value to (UINT_MAX >> 1)/MSEC_PER_SEC due to the > negative value condition in msecs_to_jiffies(). msecs_to_jiffies() > should be revised: if one wants to set the timeout above 2147483, > msecs_to_jiffies() sets the value to 4294967. (Reported by Maxim Masiutin). > - Forbid family for hash:mac sets in the kernel module: ipset userspace tool > enforces it but third party tools could create sets with this parameter. > Such sets then cannot be listed/saved with ipset itself. (Florent Fourcot) Pulled from your master branch, thanks Jozsef. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
