Re: [PATCH -next 0/6] Per network namespace netfilter chains

2015-07-16 Thread Pablo Neira Ayuso
On Wed, Jul 15, 2015 at 03:05:00PM -0500, Eric W. Biederman wrote: > Pablo Neira Ayuso writes: [...] > >> There are lots of other possible and desirable cleanups but this one is > >> a core change needed to make the other changes independent small > >> changes. > > > > The state->net field will ki

Re: [PATCH -next 0/6] Per network namespace netfilter chains

2015-07-15 Thread Eric W. Biederman
Pablo Neira Ayuso writes: > On Fri, Jul 10, 2015 at 06:11:46PM -0500, Eric W. Biederman wrote: >> >> By maintining a set of functions to register and unregister netfilter >> hooks both globally and per network namespace I have managed to write a >> compact patchset that maintain per network netf

Re: [PATCH -next 0/6] Per network namespace netfilter chains

2015-07-15 Thread Pablo Neira Ayuso
On Fri, Jul 10, 2015 at 06:11:46PM -0500, Eric W. Biederman wrote: > > By maintining a set of functions to register and unregister netfilter > hooks both globally and per network namespace I have managed to write a > compact patchset that maintain per network netfilter chains, and > registers the

[PATCH -next 0/6] Per network namespace netfilter chains

2015-07-10 Thread Eric W. Biederman
By maintining a set of functions to register and unregister netfilter hooks both globally and per network namespace I have managed to write a compact patchset that maintain per network netfilter chains, and registers the nftables netfilter hooks per network namespace. There are lots of other poss