Re: [PATCH nf-next v4 2/2] netfilter: ctnetlink: be more strict when NF_CONNTRACK_MARK is not set

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: [PATCH nf-next v4 2/2] netfilter: ctnetlink: be more strict when NF_CONNTRACK_MARK is not set
From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
Date: Sun, 29 Mar 2020 17:08:30 +0200
Cc: netfilter-devel@xxxxxxxxxxxxxxx, Florent Fourcot <florent.fourcot@xxxxxxxxxx>
In-reply-to: <20200327082632.27129-2-romain.bellan@wifirst.fr>
User-agent: NeoMutt/20170113 (1.7.2)

On Fri, Mar 27, 2020 at 09:26:32AM +0100, Romain Bellan wrote:
> When CONFIG_NF_CONNTRACK_MARK is not set, any CTA_MARK or CTA_MARK_MASK
> in netlink message are not supported. We should return an error when one
> of them is set, not both

Also applied, thanks.

References:
- [PATCH nf-next v4 1/2] netfilter: ctnetlink: add kernel side filtering for dump
  - From: Romain Bellan
- [PATCH nf-next v4 2/2] netfilter: ctnetlink: be more strict when NF_CONNTRACK_MARK is not set
  - From: Romain Bellan

Prev by Date: Re: [PATCH nf-next v4 1/2] netfilter: ctnetlink: add kernel side filtering for dump
Next by Date: Re: Suggestion: replacement for physdev-is-bridged in nft
Previous by thread: [PATCH nf-next v4 2/2] netfilter: ctnetlink: be more strict when NF_CONNTRACK_MARK is not set
Next by thread: Re: [PATCH nf-next v4 1/2] netfilter: ctnetlink: add kernel side filtering for dump
Index(es):
- Date
- Thread

[Index of Archives] [Netfitler Users] [Berkeley Packet Filter] [LARTC] [Bugtraq] [Yosemite Forum]

Powered by Linux