Re: [PATCH RFC 0/9] socket filtering using nf_tables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
Date: Tue, 11 Mar 2014 10:19:11 +0100

> The following patchset provides a socket filtering alternative to BPF
> which allows you to define your filter using the nf_tables expressions.

Generally I like this series, but of course you will need to respin
it against the work that went into net-next recently.

I only wonder about the expression implementation module loading
logic when we add an nft filter to a socket.

It seems that if the module doesn't exist, we return -EAGAIN, drop the
mutex, and retry.  I see nothing which breaks this loop, it seems like
it can run forever if a module is simply not present.

Thanks.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux