Re: [PATCH net,v3 00/12] Netfilter for net

Pablo Neira Ayuso
2026-03-26T15:00:53Z

On Thu, Mar 26, 2026 at 03:46:34PM +0100, Florian Westphal wrote:
> Pablo Neira Ayuso <pablo@netfilter.org> wrote:
> > > If anything, we should also consider this (not even compile tested):
> >
> > This chunk below looks easier to understand.
> >
> > The issue can only happen from nft_compat, correct?
>
> I don't think so. I think you can request any module that
> registers for NFPROTO_UNSPEC from arptables, which, unlike
> bridge, doesn't have compatible hook flags.
>
> So we need the existing patch (or a variant of it) in any case.

I mostly stumbled on my expectation series, Jozsef's and this specific
patch particularly yesterday late at night when making a second pass.

Let me have another look on this one later today.