On Sat, Sep 19, 2020 at 05:54:05PM +0200, Pablo Neira Ayuso wrote: > Would you redo these numbers using this ruleset to address Daniel's > comments regarding performance? > > Moreover, Daniel also suggested dev_direct_xmit() path from AF_PACKET > allows packets to escape from policy, it seems this also needs to be > extended to add a hook there too. > > Could you work on this and send a v2? Sure, will do. Thanks, Lukas
