On Sat, Oct 27, 2018 at 06:07:39PM +0200, Jozsef Kadlecsik wrote: > Hi Pablo, > > Please consider to pull the next patches for nf-next: > > - Introduction of new commands and thus protocol version 7. The > new commands makes possible to eliminate the getsockopt interface > of ipset and use solely netlink to communicate with the kernel. > Due to the strict attribute checking both in user/kernel space, > a new protocol number was introduced. Both the kernel/userspace is > fully backward compatible. > - Make invalid MAC address checks consisten, from Stefano Brivio. > The patch depends on the next one. > - Allow matching on destination MAC address for mac and ipmac sets, > also from Stefano Brivio. Pulled, thanks Jozsef.