From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Puustinen, Ismo" Subject: Nftables issues with modular rulesets Date: Fri, 4 Mar 2016 15:04:59 +0000 Message-ID: <1457103899.32348.23.camel@intel.com> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 To: "netfilter-devel@vger.kernel.org" Return-path: Received: from mga04.intel.com ([192.55.52.120]:36037 "EHLO mga04.intel.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1759227AbcCDPFB (ORCPT ); Fri, 4 Mar 2016 10:05:01 -0500 Content-Language: en-US Content-ID: <99AC0118D1A48740B64DD559B938E825@intel.com> Sender: netfilter-devel-owner@vger.kernel.org List-ID: SGkgYWxsIQ0KDQpJJ3ZlIGJlZW4gZXZhbHVhdGluZyBuZnRhYmxlcyBhIGJpdCBmb3IgYSBtb2R1 bGFyIGZpcmV3YWxsIHNldHVwLiBUaGUNCm1vZHVsYXIgc2V0dXAgbWVhbnMgdGhhdCBJJ20gdHJ5 aW5nIHRvIGFsbG93IGRpZmZlcmVudCBzZXJ2aWNlcyB0bw0KY2hhbmdlIHRoZSBiYXNlIGZpcmV3 YWxsIGNvbmZpZ3VyYXRpb24sIGZvciBleGFtcGxlIGJ5IG9wZW5pbmcgcG9ydHMNCmZvciB0aGVt c2VsdmVzLiBJJ3ZlIG1ldCBhIGZldyBpc3N1ZXMgd2hpY2ggSSB3b3VsZCBsaWtlIHRvIHNoYXJl LiBJJ20NCmEgbmV3IG5mdGFibGVzIHVzZXIsIHNvIG15IHF1ZXN0aW9ucyBhbmQgaXNzdWVzIG1h eSBiZSBhbHJlYWR5IGFuc3dlcmVkDQpzb21ld2hlcmUsIGJ1dCBiZWFyIHdpdGggbWUuIDotKcKg DQoNCjEuIFRoZXJlIGlzIGN1cnJlbnRseSBubyB3YXkgdG8gc3RvcCBwcm9jZXNzaW5nIGxvd2Vy LXByaW9yaXR5IGNoYWlucw0KYW5kIGFjY2VwdCBhIHBhY2tldC4gRm9yIGV4YW1wbGUsIGNvbnNp ZGVyIHRoZSBmb2xsb3dpbmcgZmlsZToNCg0KdGFibGUgaW5ldCBmaWx0ZXIgew0KwqDCoMKgwqBj aGFpbiBzc2ggew0KwqDCoMKgwqDCoMKgwqDCoHR5cGUgZmlsdGVyIGhvb2sgaW5wdXQgcHJpb3Jp dHkgMDsgcG9saWN5IGFjY2VwdDsNCsKgwqDCoMKgwqDCoMKgwqB0Y3AgZHBvcnQgc3NoIGFjY2Vw dDsNCsKgwqDCoMKgfQ0KDQrCoMKgwqDCoGNoYWluIGlucHV0IHsNCsKgwqDCoMKgwqDCoMKgwqB0 eXBlIGZpbHRlciBob29rIGlucHV0IHByaW9yaXR5IDE7IHBvbGljeSBkcm9wOw0KwqDCoMKgwqB9 DQp9DQoNClRoZSBzc2ggY2hhaW4gZ2V0cyBydW4gZmlyc3QgYW5kIGFjY2VwdHMgcGFja2V0cyBj b21pbmcgdG8gc3NoIHBvcnQsDQpidXQgdGhlbiB0aGUgZGVmYXVsdCBydWxlIGtpY2tzIGluIGFu ZCBkcm9wcyBhbGwgcGFja2V0cy4gVGhlIGVhcmxpZXINCmNoYWlucyBjYW4gZHJvcCBhbmQgcmVq ZWN0IHBhY2tldHMsIGJ1dCB0aGV5IGNhbid0IGFjY2VwdCB0aGVtLiBJJ20NCmRvaW5nIHBhY2tl dCBtYXJraW5nIHRvIGdldCB0aGlzIHRvIHdvcmsgcmlnaHQgbm93LiBPbmUgc29sdXRpb24gd291 bGQNCmJlIHRvIGhhdmUgYSBuZXcgdmVyZGljdCAiYWNjZXB0X2FuZF9zdG9wIiwgd2hpY2ggd291 bGQgYWNjZXB0IHRoZQ0KcGFja2V0IGFuZCBzdG9wIHByb2Nlc3NpbmcgbG93ZXItcHJpb3JpdHkg Y2hhaW5zLCBiZWluZyBzeW1tZXRyaWMgdG8NCmRyb3AgYW5kIHJlamVjdC4NCg0KMi4gSXQgd291 bGQgYmUgbmljZSBpZiB0aGVyZSB3b3VsZCBiZSBzZXQgb3BlcmF0aW9ucyBhdmFpbGFibGUuIEZv cg0KaW5zdGFuY2UsIEknbSBoYXZpbmcgc2V0cyB3aXRoIG5ldHdvcmsgaW50ZXJmYWNlcy4gSXQg d291bGQgYmUgY29vbCB0bw0KbWF0Y2ggdG8gYSB1bmlvbiwgaW50ZXJzZWN0aW9uLCBhbmQgY29t cGxlbWVudCBvZiB0d28gc2V0czogInVuaW9uIEBsYW4NCkB3YW4iIG9yIHNpbWlsYXIuDQoNCkJ0 dywgSSB0aGluayB0aGUgZGlmZmVyZW5jZSBiZXR3ZWVuIGFub255bW91cyBkZWZpbmVkIHNldHMN Cg0KZGVmaW5lIGxvY2FsX2lmcyA9IHsgbG8sIGV0aDAgfQ0KDQphbmQgbmFtZWQgc2V0cw0KDQpz ZXQgbG9jYWxfaWZzIHsNCsKgwqDCoMKgdHlwZSBpZmFjZV9pbmRleA0KwqDCoMKgwqBlbGVtZW50 cyA9IHsgbG8sIGV0aDAgfQ0KfQ0KDQpjb3VsZCBiZSBkb2N1bWVudGVkIGJldHRlci4gSSBub3Rp Y2VkIHRoYXQgYXQgbGVhc3QgSSBjYW4ndCBkZWZpbmUNCmVtcHR5IGFub255bW91cyBzZXRzICgi ZGVmaW5lIGxvY2FsX2lmcyA9IHt9IiBmYWlscyksIHNvIEkgZ3Vlc3MgSQ0KY2FuJ3QgYWRkIG9y IHJlbW92ZSBlbGVtZW50cyB0by9mcm9tIHRob3NlIGVpdGhlci4gSSBoYXZlIHNvbWUNCnNpdHVh dGlvbnMgd2hlcmUgdGhlIGludGVyZmFjZXMgYXJlIGNoYW5naW5nIGR5bmFtaWNhbGx5IChzdWNo IGFzIHZwbg0KaW50ZXJmYWNlcyksIHNvIG11dGFibGUgc2V0cyBhcmUgYSBtdXN0Lg0KDQozLiBJ IGNhbid0IGltcG9ydCBydWxlc2V0cyB0d2ljZSBvbiBnbG9iYWwgbGV2ZWwuIEkgd2FudGVkIHRv IGRvIGENCiJ2YXJpYWJsZXMucnVsZXNldCIgZmlsZSwgd2hpY2ggd291bGQgY29udGFpbiBzb21l IHBhY2tldCBtYXJrcyBhbmQgc28NCm9uIHRoYXQgY291bGQgYmUgaW5jbHVkZWQgdG8gYWxsIHRo ZSBydWxlIGZpbGVzIHRoYXQgSSB3YW50ZWQgdG8gbG9hZCwNCkkgd291bGQgbWVldCBhIGxvdCBv ZiAicmVkZmluaXRpb24gb2Ygc3ltYm9sIiBlcnJvciBtZXNzYWdlcy4gSXQgd291bGQNCmJlIG5p Y2UgdG8gaGF2ZSBzb21ldGhpbmcgbGlrZSAiI3ByYWdtYSBvbmNlIiBmb3IgaW5jbHVkZSBmaWxl cy4gVGhlcmUNCmlzIGFsc28gYSB0eXBvIGluIHRoZSB3b3JkICJyZWRmbml0aW9uIi4gOi0pDQoN CjQuIE5mdCBjYW4ndCBhZGQgdHdvIGNoYWlucyB0byB0aGUgc2FtZSB0YWJsZSBmcm9tIHR3byBp bmNsdWRlZCBmaWxlcw0KKG9yIG9uZSBmaWxlIHdpdGggdGhlIHRhYmxlIGRlZmluZWQgdHdvIHRp bWVzKS4gSG93ZXZlciwgdGhpcyB3b3Jrcw0KZmluZSBpZiB0aGUgdHdvIGZpbGVzIGFyZSBsb2Fk ZWQgaW4gc2VxdWVuY2UgdXNpbmcgdG8gIm5mdCAtZiINCmNvbW1hbmRzLg0KDQpGb3IgZXhhbXBs ZSwgaWYgSSB0cmllZCB0byBsb2FkIGEgcnVsZXMucnVsZXNldCBmaWxlIHRoYXQgbG9va2VkIGxp a2UNCnRoaXMgd2l0aCAibmZ0IC1mIHJ1bGVzLnJ1bGVzZXQiOg0KDQp0YWJsZSBpbmV0IGZpbHRl ciB7DQrCoMKgwqDCoGNoYWluIHNzaCB7DQrCoMKgwqDCoMKgwqDCoMKgdHlwZSBmaWx0ZXIgaG9v ayBpbnB1dCBwcmlvcml0eSAwOyBwb2xpY3kgYWNjZXB0Ow0KwqDCoMKgwqDCoMKgwqDCoHRjcCBk cG9ydCBzc2ggYWNjZXB0Ow0KwqDCoMKgwqB9DQp9DQoNCnRhYmxlIGluZXQgZmlsdGVyIHsNCsKg wqDCoMKgY2hhaW4gaW5wdXQgew0KwqDCoMKgwqDCoMKgwqDCoHR5cGUgZmlsdGVyIGhvb2sgaW5w dXQgcHJpb3JpdHkgMTsgcG9saWN5IGRyb3A7DQrCoMKgwqDCoH0NCn0NCg0KSSB3b3VsZCByZWNl aXZlIGFuIGVycm9yIG1lc3NhZ2U6ICJydWxlcy5ydWxlc2V0Ojg6Mi0zOiBFcnJvcjogQ291bGQN Cm5vdCBwcm9jZXNzIHJ1bGU6IE5vIHN1Y2ggZmlsZSBvciBkaXJlY3RvcnkuIiBUaGlzIGVycm9y IG1lc3NhZ2UgaXMgYml0DQpvZGQsIHNpbmNlIGl0IGZlZWxzIHRvIHRoZSB1c2VyIHRoYXQgYWxs IG5lY2Vzc2FyeSBmaWxlcyBhbmQNCmRpcmVjdG9yaWVzIGFyZSBpbiBwbGFjZS4uLiBIb3dldmVy LCBpZiBJIGhhZCB0d28gZmlsZXMgbGlrZSB0aGlzOg0KDQpmaWxlIHJ1bGVzLnJ1bGVzZXQ6DQoN CnRhYmxlIGluZXQgZmlsdGVyIHsNCsKgwqDCoMKgY2hhaW4gaW5wdXQgew0KwqDCoMKgwqDCoMKg wqDCoHR5cGUgZmlsdGVyIGhvb2sgaW5wdXQgcHJpb3JpdHkgMTsgcG9saWN5IGRyb3A7DQrCoMKg wqDCoH0NCn0NCg0KZmlsZSBzc2gucnVsZXNldDoNCg0KdGFibGUgaW5ldCBmaWx0ZXIgew0KwqDC oMKgwqBjaGFpbiBzc2ggew0KwqDCoMKgwqDCoMKgwqDCoHR5cGUgZmlsdGVyIGhvb2sgaW5wdXQg cHJpb3JpdHkgMDsgcG9saWN5IGFjY2VwdDsNCsKgwqDCoMKgwqDCoMKgwqB0Y3AgZHBvcnQgc3No IGFjY2VwdDsNCsKgwqDCoMKgfQ0KfQ0KDQphbmQgdGhlbiBsb2FkZWQgdGhvc2UgZmlsZXMgd2l0 aCB0d28gIm5mdCAtZiIgY29tbWFuZHMsIGV2ZXJ5dGhpbmcNCndvdWxkIGdvIGZpbmUgYW5kIEkg d291bGQgZ2V0IHRoZSByZXN1bHQgSSBleHBlY3RlZC4gVGhpcyBtYWtlcyBpdA0KZGlmZmljdWx0 IHRvIGluY2x1ZGUgY29uZmlndXJhdGlvbiBmaWxlcyBpbnRvIG90aGVyIGNvbmZpZ3VyYXRpb24N CmZpbGVzLiBBIHdvcmthcm91bmQgaXMgdG8gZGVmaW5lIG9ubHkgY2hhaW5zIGluIGluY2x1ZGVk IGZpbGVzIGFuZA0KaW5jbHVkZSB0aGVtIGludG8gdGhlIHRhYmxlLCBidXQgdGhpcyBtYWtlcyB0 aGUgaW5jbHVkZWQgZmlsZXMgdG8gYmUNCm5vdCBhYmxlIHRvIGJlIGxvYWRlZCBpbmRpdmlkdWFs bHkuDQoNCg0KSSBhbHJlYWR5IHN1Ym1pdHRlZCBhIHBhdGNoIGZvciB0aGUgaW5jbHVkZSBkaXJl Y3RvcnkgdXNlIGNhc2UsIHdoaWNoDQp3YXMgb25lIG9mIG15IGlzc3VlcywgYW5kIEZsb3JpYW4g V2VzdHBoYWwgd3JvdGUgYSBwYXRjaCB0byBhbGxvdyBzZXRzDQp0aGF0IGNvbnRhaW4gaW50ZXJm YWNlIG5hbWVzLCB3aGljaCB3YXMgYW5vdGhlciBibG9ja2VyIGZvciBtZS4gTmZ0DQpsb29rcyBs aWtlIGEgaHVnZSBpbXByb3ZlbWVudCB0byBpcHRhYmxlcyBmb3IgbWFraW5nIGEgbW9kdWxhciBu b24tDQpjZW50cmFsaXplZCBmaXJld2FsbCBydWxlIHNldCB0aGF0IGRvZXNuJ3QgbmVlZCB2ZXJ5 IG11Y2ggYWRtaW5pc3RyYXRvcg0KaW50ZXJhY3Rpb24uIEkgdGhpbmsgdGhlcmUgY291bGQgc3Rp bGwgYmUgc29tZSBpbXByb3ZlbWVudCBmb3IgdGhlDQptb2R1bGFyIGNvbmZpZ3VyYXRpb24gYWJp bGl0eSBhbmQgcG9zc2libHkgZXZlbiBzb21lIGRvY3VtZW50YXRpb24gZm9yDQplc3BlY2lhbGx5 IHRoaXMgdXNlIGNhc2UuDQoNCklzbW8=