{"id":819260,"url":"http://patchwork.ozlabs.org/api/covers/819260/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/cover/20170927181654.3129-1-fw@strlen.de/","project":{"id":26,"url":"http://patchwork.ozlabs.org/api/projects/26/?format=json","name":"Netfilter Development","link_name":"netfilter-devel","list_id":"netfilter-devel.vger.kernel.org","list_email":"netfilter-devel@vger.kernel.org","web_url":null,"scm_url":null,"webscm_url":null,"list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20170927181654.3129-1-fw@strlen.de>","list_archive_url":null,"date":"2017-09-27T18:16:44","name":"[nft,0/10] nftables remove use of meta nfproto","submitter":{"id":1025,"url":"http://patchwork.ozlabs.org/api/people/1025/?format=json","name":"Florian Westphal","email":"fw@strlen.de"},"mbox":"http://patchwork.ozlabs.org/project/netfilter-devel/cover/20170927181654.3129-1-fw@strlen.de/mbox/","series":[],"comments":"http://patchwork.ozlabs.org/api/covers/819260/comments/","headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@bilbo.ozlabs.org","Authentication-Results":"ozlabs.org;\n\tspf=none (mailfrom) smtp.mailfrom=vger.kernel.org\n\t(client-ip=209.132.180.67; helo=vger.kernel.org;\n\tenvelope-from=netfilter-devel-owner@vger.kernel.org;\n\treceiver=)","Received":["from vger.kernel.org (vger.kernel.org [209.132.180.67])\n\tby ozlabs.org (Postfix) with ESMTP id 3y2Qxx3xyyz9sPt\n\tfor ;\n\tThu, 28 Sep 2017 04:16:37 +1000 (AEST)","(majordomo@vger.kernel.org) by vger.kernel.org via listexpand\n\tid S1751890AbdI0SQg (ORCPT );\n\tWed, 27 Sep 2017 14:16:36 -0400","from Chamillionaire.breakpoint.cc ([146.0.238.67]:37744 \"EHLO\n\tChamillionaire.breakpoint.cc\" rhost-flags-OK-OK-OK-OK)\n\tby vger.kernel.org with ESMTP id S1751555AbdI0SQg (ORCPT\n\t);\n\tWed, 27 Sep 2017 14:16:36 -0400","from fw by Chamillionaire.breakpoint.cc with local (Exim 4.84_2)\n\t(envelope-from )\n\tid 1dxGpV-0006g0-Qs; Wed, 27 Sep 2017 20:13:05 +0200"],"From":"Florian Westphal ","To":"","Subject":"[PATCH nft 0/10] nftables remove use of meta nfproto","Date":"Wed, 27 Sep 2017 20:16:44 +0200","Message-Id":"<20170927181654.3129-1-fw@strlen.de>","X-Mailer":"git-send-email 2.13.5","Sender":"netfilter-devel-owner@vger.kernel.org","Precedence":"bulk","List-ID":"","X-Mailing-List":"netfilter-devel@vger.kernel.org"},"content":"inet family (and others, e.g. bridge) lack context to figure\nout the layer 3 address type.\n\nexamples:\nct original saddr $addr\nrt nexthop $addr\n\nWe can't use $addr, because it might be a set reference, e.g.\n\nct original saddr @whitelist\n\ncurrently implemented workaround is to use 'meta nfproto'\nto provide the l3 context, e.g.\n\nmeta nfproto ip rt nexthop 10.2.3.4\n\ni.e. users need to fill dependency manually.\n\nPablo suggested to instead specify ip saddr, ip6 saddr:\n\nct original ip saddr $address\n\nand then let nft handle the dependency injection.\n\nThis series does just that.\n\nOld syntax is preserved.\n\n doc/nft.xml | 23 ++++++++---\n include/ct.h | 3 -\n include/expression.h | 2 \n src/ct.c | 70 ++++++++++++++++++++++++----------\n src/evaluate.c | 92 +++++++++++++++++++++++++++++++++++----------\n src/netlink_delinearize.c | 52 +++++++++++--------------\n src/parser_bison.y | 42 ++++++++++++++++++--\n src/rt.c | 14 ++++++\n tests/py/bridge/icmpX.t | 4 -\n tests/py/inet/ct.t | 7 ++-\n tests/py/inet/ct.t.payload | 4 -\n tests/py/inet/icmpX.t | 4 -\n tests/py/inet/rt.t | 10 +++-\n tests/py/inet/rt.t.payload | 4 -\n tests/py/ip/ct.t | 18 ++++----\n tests/py/ip/ct.t.payload | 16 +++----\n tests/py/ip/rt.t | 3 -\n tests/py/ip6/rt0.t | 2 \n 18 files changed, 260 insertions(+), 110 deletions(-)\n--\nTo unsubscribe from this list: send the line \"unsubscribe netfilter-devel\" in\nthe body of a message to majordomo@vger.kernel.org\nMore majordomo info at http://vger.kernel.org/majordomo-info.html"}