On 21.12.2019 01:14, Gleb Smirnoff wrote: > A> > Another future feature is possiblity to create pfil heads, that provide > A> > not an mbuf pointer but just a memory pointer with length. That would > A> > allow filtering at very early stages of a packet lifecycle, e.g. when > A> > packet has just been received by a NIC and no mbuf was yet allocated. > A> It seems that this commit has changed the error code returned from > A> ip[6]_output() when a packet is blocked. Previously it was EACCES, but > A> now it became EPERM. Was it intentional? > > I don't think that was intentional. Can you please review this patch?
LGTM, thanks! -- WBR, Andrey V. Elsukov
signature.asc
Description: OpenPGP digital signature
