Re: [PATCH net 0/2] netfilter: ipvs: some fixes in sctp_conn_schedule

2017-08-31 Thread Simon Horman
On Mon, Aug 28, 2017 at 06:17:32PM +0200, Pablo Neira Ayuso wrote: > On Sun, Aug 20, 2017 at 01:38:06PM +0800, Xin Long wrote: > > Patch 1/2 fixes the regression introduced by commit 5e26b1b3abce. > > Patch 2/2 makes ipvs not create conn for sctp ABORT packet. > > Will wait for Julian and Simon

[PATCH nf] netfilter: nf_nat: don't bug when mapping already exists

2017-08-31 Thread Florian Westphal
It seems preferrable to limp along if we have a conflicting mapping, its certainly better than a BUG(). Signed-off-by: Florian Westphal --- This can be triggered with nfqueue and bridge netfilter. So far we found no good way to fix this problem (bridge netfilter violates

Re: [PATCH nft v2 00/18] introducing libnftables

2017-08-31 Thread Pablo Neira Ayuso
On Wed, Aug 30, 2017 at 12:31:32PM +0200, Phil Sutter wrote: > Hi, > > On Sat, Aug 19, 2017 at 05:24:02PM +0200, Eric Leblond wrote: > > This patchset is the second version of libnftables introduction patchset. > > It addresses some remarks by Phil Sutter. Other remarks as said on the ML > > are

Re: [PATH nft v2 13/18] libnftables: add nft_context_set_print

2017-08-31 Thread Pablo Neira Ayuso
On Wed, Aug 30, 2017 at 12:46:17PM +0200, Pablo Neira Ayuso wrote: > On Fri, Aug 25, 2017 at 01:49:56PM +0200, Eric Leblond wrote: > > On Fri, 2017-08-25 at 11:59 +0200, Pablo Neira Ayuso wrote: > > > On Sat, Aug 19, 2017 at 05:24:15PM +0200, Eric Leblond wrote: > > > > diff --git