Re: Seeking help for implementing CT HELPER in nftables

2016-09-23 Thread Florian Westphal
Pablo Neira Ayuso wrote: > On Fri, Sep 23, 2016 at 12:45:06PM +0200, Christophe Leroy wrote: > > Le 20/09/2016 à 17:38, Florian Westphal a écrit : > [...] > > >nft will need to populate this (or rather, libnftnl will do this on > > >behalf of nft). > > > > > >Currently we do this: > > >nft --debug

Re: Seeking help for implementing CT HELPER in nftables

2016-09-23 Thread Christophe Leroy
Le 23/09/2016 à 17:19, Pablo Neira Ayuso a écrit : On Fri, Sep 23, 2016 at 04:48:32PM +0200, Christophe Leroy wrote: Le 23/09/2016 à 16:24, Pablo Neira Ayuso a écrit : On Fri, Sep 23, 2016 at 12:45:06PM +0200, Christophe Leroy wrote: Le 20/09/2016 à 17:38, Florian Westphal a écrit : [...]

Re: Seeking help for implementing CT HELPER in nftables

2016-09-23 Thread Pablo Neira Ayuso
On Fri, Sep 23, 2016 at 04:48:32PM +0200, Christophe Leroy wrote: > Le 23/09/2016 à 16:24, Pablo Neira Ayuso a écrit : > >On Fri, Sep 23, 2016 at 12:45:06PM +0200, Christophe Leroy wrote: > >>Le 20/09/2016 à 17:38, Florian Westphal a écrit : > >[...] > >>>nft will need to populate this (or rather,

Re: Seeking help for implementing CT HELPER in nftables

2016-09-23 Thread Christophe Leroy
Le 23/09/2016 à 16:24, Pablo Neira Ayuso a écrit : On Fri, Sep 23, 2016 at 12:45:06PM +0200, Christophe Leroy wrote: Le 20/09/2016 à 17:38, Florian Westphal a écrit : [...] nft will need to populate this (or rather, libnftnl will do this on behalf of nft). Currently we do this: nft --debug=

Re: Seeking help for implementing CT HELPER in nftables

2016-09-23 Thread Florian Westphal
Pablo Neira Ayuso wrote: > On Fri, Sep 23, 2016 at 12:45:06PM +0200, Christophe Leroy wrote: > > Le 20/09/2016 à 17:38, Florian Westphal a écrit : > [...] > > >nft will need to populate this (or rather, libnftnl will do this on > > >behalf of nft). > > > > > >Currently we do this: > > >nft --debug

Re: Seeking help for implementing CT HELPER in nftables

2016-09-23 Thread Pablo Neira Ayuso
On Fri, Sep 23, 2016 at 12:45:06PM +0200, Christophe Leroy wrote: > Le 20/09/2016 à 17:38, Florian Westphal a écrit : [...] > >nft will need to populate this (or rather, libnftnl will do this on > >behalf of nft). > > > >Currently we do this: > >nft --debug=netlink add rule filter i ct helper set f

Re: Seeking help for implementing CT HELPER in nftables

2016-09-23 Thread Christophe Leroy
Le 20/09/2016 à 17:38, Florian Westphal a écrit : Christophe Leroy wrote: Hello Florian and Patrick, Le 12/04/2016 à 15:51, Florian Westphal a écrit : Christophe Leroy wrote: [ nft_ct helper set support ] Patrick, can you help ? I have a few pending patches, one of them adds an immedi

Re: Seeking help for implementing CT HELPER in nftables

2016-09-20 Thread Florian Westphal
Christophe Leroy wrote: > Hello Florian and Patrick, > > Le 12/04/2016 à 15:51, Florian Westphal a écrit : > >Christophe Leroy wrote: > > > >[ nft_ct helper set support ] > > > >>Patrick, can you help ? > > > >I have a few pending patches, one of them adds an immediate > >attr for ctlabel set su

Re: Seeking help for implementing CT HELPER in nftables

2016-09-20 Thread Christophe Leroy
Hello Florian and Patrick, Le 12/04/2016 à 15:51, Florian Westphal a écrit : Christophe Leroy wrote: [ nft_ct helper set support ] Patrick, can you help ? I have a few pending patches, one of them adds an immediate attr for ctlabel set support. Lets see if that approach is sane enough to

Re: Seeking help for implementing CT HELPER in nftables

2016-04-12 Thread Florian Westphal
Christophe Leroy wrote: [ nft_ct helper set support ] > Patrick, can you help ? I have a few pending patches, one of them adds an immediate attr for ctlabel set support. Lets see if that approach is sane enough to be reused for helper support. I will post it soon. -- To unsubscribe from this

Re: Seeking help for implementing CT HELPER in nftables

2016-04-12 Thread Christophe Leroy
Patrick, can you help ? Le 09/03/2016 00:25, Christophe Leroy a écrit : Le 07/03/2016 14:20, Patrick McHardy a écrit : On 05.03, christophe leroy wrote: Hello, I'm trying to implement support for CT HELPERs in linux kernel for nftables and need some help/guidance. The rule beeing 'udp dport

Re: Seeking help for implementing CT HELPER in nftables

2016-03-08 Thread Christophe Leroy
Le 07/03/2016 14:20, Patrick McHardy a écrit : On 05.03, christophe leroy wrote: Hello, I'm trying to implement support for CT HELPERs in linux kernel for nftables and need some help/guidance. The rule beeing 'udp dport tftp ct helper set "tftp"', I get nft_ct_set_init() called when I add the

Re: Seeking help for implementing CT HELPER in nftables

2016-03-07 Thread Patrick McHardy
On 05.03, christophe leroy wrote: > Hello, > > I'm trying to implement support for CT HELPERs in linux kernel for > nftables and need some help/guidance. > > The rule beeing 'udp dport tftp ct helper set "tftp"', I get > nft_ct_set_init() called when I add the rule in the table output filter > ta

Seeking help for implementing CT HELPER in nftables

2016-03-05 Thread christophe leroy
Hello, I'm trying to implement support for CT HELPERs in linux kernel for nftables and need some help/guidance. The rule beeing 'udp dport tftp ct helper set "tftp"', I get nft_ct_set_init() called when I add the rule in the table output filter table. I believe I have to call nf_ct_helper_