[libvirt] [PATCH] nwfilter: probe for inverted ctdir

2013-03-21 Thread Stefan Berger
Linux netfilter at some point inverted the meaning of the '--ctdir reply' and newer netfilter implementations now expect '--ctdir original' instread and vice-versa. We probe for this netfilter change via a UDP message over loopback and 3 filtering rules applied to INPUT. If the sent byte arrives,

Re: [libvirt] [PATCH] nwfilter: probe for inverted ctdir

2013-03-21 Thread Eric Blake
On 03/21/2013 04:04 PM, Stefan Berger wrote: Linux netfilter at some point inverted the meaning of the '--ctdir reply' and newer netfilter implementations now expect '--ctdir original' instread and vice-versa. s/instread/instead/ We probe for this netfilter change via a UDP message over

Re: [libvirt] [PATCH] nwfilter: probe for inverted ctdir

2013-03-21 Thread Stefan Berger
On 03/21/2013 06:26 PM, Eric Blake wrote: On 03/21/2013 04:04 PM, Stefan Berger wrote: C guarantees that this is initialized to false without having to explicitly state that. Looks big, but it's a one-time probe done at initialization, and seems like it does the trick. You may want to wait for

Re: [libvirt] [PATCH] nwfilter: probe for inverted ctdir

2013-03-21 Thread Eric Blake
On 03/21/2013 06:40 PM, Stefan Berger wrote: On 03/21/2013 06:26 PM, Eric Blake wrote: On 03/21/2013 04:04 PM, Stefan Berger wrote: C guarantees that this is initialized to false without having to explicitly state that. Looks big, but it's a one-time probe done at initialization, and seems