netfilter: helper set support
Get series with b4
b4 am [email protected]Versions newest first
- v1 Latest2 patches 2 repliesIn review
Patches in v1 No applies recorded yet
| # | Subject and files | Size | Replies | Applied |
|---|---|---|---|---|
| 1/2 | netfilter: provide nft_ctxc in object init functioninclude/ net/ net/ +1 more | +10 | 0 replies | |
| 2/2 | netfilter: nft_ct: add helper set supportinclude/ net/ | +182 | 0 replies |
Reviews trailers per patch
No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.
Cover letter [PATCH nf-next 0/2] netfilter: helper set support
This adds support to set the conntrack helper from nftables, using nft set ct helper "foo" syntax.
Helpers are defined through the objref infrastructure.
Open question: should NFT_MSG_GETOBJ_RESET get rejected for this new type?
A future patch could extend the attributes so we can also handle module specific settings, such as ftp loose mode, or configure the number of allowed expectations.
include/net/netfilter/nf_tables.h | 3 ++- include/net/netfilter/nf_tables.h | 3 include/uapi/linux/netfilter/nf_tables.h | 12 +- net/netfilter/nf_tables_api.c | 7 - net/netfilter/nft_counter.c | 3 net/netfilter/nft_ct.c | 171 +++++++++++++++++++++++++++++++ net/netfilter/nft_quota.c | 3 6 files changed, 192 insertions(+), 7 deletions(-)