From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pablo Neira Ayuso Subject: Re: [PATCH v2] extensions: libxt_multiport: Add translation to nft Date: Tue, 31 May 2016 12:03:55 +0200 Message-ID: <20160531100355.GA1784@salvia> References: <20160530194748.GA25328@sonyv> <20160530224104.GA2199@salvia> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: Laura Garcia Liebana , Netfilter Development Mailing list To: Arturo Borrero Gonzalez Return-path: Received: from mail.us.es ([193.147.175.20]:36047 "EHLO mail.us.es" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751626AbcEaKEA (ORCPT ); Tue, 31 May 2016 06:04:00 -0400 Received: from antivirus1-rhel7.int (unknown [192.168.2.11]) by mail.us.es (Postfix) with ESMTP id 3522C1C3302 for ; Tue, 31 May 2016 12:03:58 +0200 (CEST) Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id 23DB315D64D for ; Tue, 31 May 2016 12:03:58 +0200 (CEST) Received: from antivirus1-rhel7.int (localhost [127.0.0.1]) by antivirus1-rhel7.int (Postfix) with ESMTP id 180DB15D64C for ; Tue, 31 May 2016 12:03:56 +0200 (CEST) Content-Disposition: inline In-Reply-To: Sender: netfilter-devel-owner@vger.kernel.org List-ID: On Tue, May 31, 2016 at 10:23:31AM +0200, Arturo Borrero Gonzalez wrote: > On 31 May 2016 at 00:41, Pablo Neira Ayuso wrote: > > This is not yet supported. This requires a small kernel patch to allow > > inversions in the nft_lookup.c. Then, the little extra code for > > libnftnl and nft. > > > > All tests for this usecase are disabled at the moment. > > What is your idea of the implementation? > > Perhaps adding NFTA_LOOKUP_FLAGS and also: > enum nft_lookup_flags { > NFT_LOOKUP_F_INV = (1 << 0), > }; Something like that, yes.