From mboxrd@z Thu Jan 1 00:00:00 1970 From: Florian Westphal Subject: Re: [v5 PATCH 1/1] netfilter: Add fail-open support Date: Thu, 24 May 2012 22:42:05 +0200 Message-ID: <20120524204205.GB23617@breakpoint.cc> References: <20120524135631.24345.60254.sendpatchset@localhost.localdomain> <20120524135644.24345.694.sendpatchset@localhost.localdomain> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: kaber@trash.net, pablo@netfilter.org, vivk@us.ibm.com, svajipay@in.ibm.com, netfilter-devel@vger.kernel.org, sri@us.ibm.com To: Krishna Kumar Return-path: Received: from Chamillionaire.breakpoint.cc ([80.244.247.6]:60951 "EHLO Chamillionaire.breakpoint.cc" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1756132Ab2EXUmM (ORCPT ); Thu, 24 May 2012 16:42:12 -0400 Content-Disposition: inline In-Reply-To: <20120524135644.24345.694.sendpatchset@localhost.localdomain> Sender: netfilter-devel-owner@vger.kernel.org List-ID: Krishna Kumar wrote: > Implement a new "fail-open" mode where packets are not dropped > upon queue-full condition. This mode can be enabled/disabled per > queue using netlink NFQA_CFG_FLAGS & NFQA_CFG_MASK attributes. > > Signed-off-by: Krishna Kumar > Signed-off-by: Vivek Kashyap > Signed-off-by: Sridhar Samudrala > --- > include/linux/netfilter/nfnetlink_queue.h | 5 ++ > net/netfilter/nfnetlink_queue.c | 40 ++++++++++++++++++-- > 2 files changed, 42 insertions(+), 3 deletions(-) Looks good to me. Thanks for your patience!