Florian Westphal <f...@strlen.de> wrote: > The dummy ruleset I used to test the original validation change was broken, > most rules were unreachable and were not tested by mark_source_chains().
... I will send a v3 to also include arptables. I thought arptables was irrelevant since arptable rulesets are usually very small but I forgot about DoS angle (we use single mutext for all net nsamespaces). -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
