On Tue, May 31, 2016 at 10:23:31AM +0200, Arturo Borrero Gonzalez wrote:
> On 31 May 2016 at 00:41, Pablo Neira Ayuso <[email protected]> wrote:
> > This is not yet supported. This requires a small kernel patch to allow
> > inversions in the nft_lookup.c. Then, the little extra code for
> > libnftnl and nft.
> >
> > All tests for this usecase are disabled at the moment.
> 
> What is your idea of the implementation?
> 
> Perhaps adding NFTA_LOOKUP_FLAGS and also:
> enum nft_lookup_flags {
>    NFT_LOOKUP_F_INV = (1 << 0),
> };

Something like that, yes.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to [email protected]
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to