On Tue, Jan 21, 2014 at 12:59:09PM +0100, Andreas Herz wrote: > First of all thanks for the release and ongoing work! > > On 20/01/14 at 13:11, Patrick McHardy wrote: > > nftables features native support for sets and dictionaries of arbitrary > > types, support for many different protocols, meta data types, connection > > tracking, NAT, logging, atomic incremental and full ruleset updates, > > a netlink API with notification support, a format grammar, a compatiblity > > layer for iptables/ip6tables and more. > > Does the native set support also include sets with timeout, like the > ipset maintained by Jozsef? > Or is there any plan to introduce this feature into nftables or just use > ipset and make it nftables compatible? > > Since i'm using a patched version of ipset i would like to know the > future related to that feature :) Currently we don't support timeouts and also don't support dynamically adding members to sets, though the last part would be pretty easy to implement. Timeouts shouldn't be that hard as well, but I would need to think about this some more, I'd prefer not to add struct timer_lists everywhere. I'll intend to work on some set related stuff in the next time, I'll look into it then. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
