On Sat 19 May 2018 at 21:04, Marcelo Ricardo Leitner
wrote:
> On Mon, May 14, 2018 at 05:27:03PM +0300, Vlad Buslov wrote:
>> Change type of action reference counter to refcount_t.
>>
>> Change type of action bind counter to atomic_t.
>> This type is used to allow decrementing bind counter witho
On Sun 20 May 2018 at 06:22, Jiri Pirko wrote:
> Sat, May 19, 2018 at 11:43:27PM CEST, marcelo.leit...@gmail.com wrote:
>>On Mon, May 14, 2018 at 05:27:07PM +0300, Vlad Buslov wrote:
>>...
>>> @@ -1052,6 +1088,36 @@ static int tca_action_flush(struct net *net, struct
>>> nlattr *nla,
>>> ret
In commit 47b7e7f82802, this bit was removed at the same time the
RT6_LOOKUP_F_IFACE flag was removed. However, it is needed when
link-local addresses are used, which is a very common case: when
packets are routed, neighbor solicitations are done using link-local
addresses. For example, the followi
On Sat 19 May 2018 at 21:52, Marcelo Ricardo Leitner
wrote:
> On Mon, May 14, 2018 at 05:27:10PM +0300, Vlad Buslov wrote:
>> Return from action init function with reference to action taken,
>> even when overwriting existing action.
>
> Isn't this patch necessary before patch 7, to not break thin
On Sun, May 20, 2018 at 1:20 AM, Marcelo Ricardo Leitner
wrote:
> On Mon, May 14, 2018 at 05:27:14PM +0300, Vlad Buslov wrote:
>> Substitute calls to action insert function with calls to action insert
>> unique function that warns if insertion overwrites index in idr.
>
> I know this patch may be
On Mon, May 21, 2018 at 12:13:06AM +0300, Or Gerlitz wrote:
> On Sun, May 20, 2018 at 1:20 AM, Marcelo Ricardo Leitner
> wrote:
> > On Mon, May 14, 2018 at 05:27:14PM +0300, Vlad Buslov wrote:
> >> Substitute calls to action insert function with calls to action insert
> >> unique function that war
On Mon, May 21, 2018 at 12:33 AM, Marcelo Ricardo Leitner
wrote:
> On Mon, May 21, 2018 at 12:13:06AM +0300, Or Gerlitz wrote:
>> On Sun, May 20, 2018 at 1:20 AM, Marcelo Ricardo Leitner
>> wrote:
>> > On Mon, May 14, 2018 at 05:27:14PM +0300, Vlad Buslov wrote:
>> >> Substitute calls to action i
adds snat and dnat.
Translation for snat isn't complete, the --snat-arp switch isn't supported so
far.
Signed-off-by: Florian Westphal
---
extensions/libebt_dnat.c | 134 ++
extensions/libebt_dnat.txlate | 8 ++
extensions/libebt_snat.c | 151 +++
No translation. The kernel match will alter packet type
(meta set pkttype), but also replace dst mac with the bridges' mac address,
however nft currently doesn't allow to retrieve this at runtime.
So just add this without the xlate part for now.
Signed-off-by: Florian Westphal
---
extensions/l
no translation yet, might be doable with raw payload expressions though.
Signed-off-by: Florian Westphal
---
extensions/libebt_arp.c | 490
iptables/xtables-eb.c | 1 +
2 files changed, 491 insertions(+)
create mode 100644 extensions/libebt_arp.c
di
On Mon, May 21, 2018 at 12:40:54AM +0300, Or Gerlitz wrote:
> On Mon, May 21, 2018 at 12:33 AM, Marcelo Ricardo Leitner
> wrote:
> > On Mon, May 21, 2018 at 12:13:06AM +0300, Or Gerlitz wrote:
> >> On Sun, May 20, 2018 at 1:20 AM, Marcelo Ricardo Leitner
> >> wrote:
> >> > On Mon, May 14, 2018 at
On Tue, May 15, 2018 at 12:42:09AM +0200, Florian Westphal wrote:
> Duncan Roe wrote:
> > Since commit b1cdae87f25021eb835872d86d6e7206bd421c3f, make fails thusly:
> >
> > > libebtc.c: In function 'ebt_reinit_extensions':
> > > libebtc.c:275:11: error: 'union ' has no member named
> > > 'revision
Hi Rolf,
On Sat, May 19, 2018 at 02:37:21PM +0200, Rolf Fokkens wrote:
> Hi All,
>
> It was brought up in the past, but I think it never was properly addressed.
> I'd like to have an iptables rule like this:
>
> iptables -w -t raw -I PREROUTING -p tcp --dport 10050 -j CT --ctevents
> none
>
13 matches
Mail list logo