Re: [PATCH nft] src: add netdev family support

2015-05-26 Thread Pablo Neira Ayuso
On Tue, May 26, 2015 at 06:52:04PM +0200, Patrick McHardy wrote: > On 25.05, Pablo Neira Ayuso wrote: > > diff --git a/include/rule.h b/include/rule.h > > index 97959f7..06ec2ff 100644 > > --- a/include/rule.h > > +++ b/include/rule.h > > @@ -72,6 +72,7 @@ enum table_flags { > > * > > * @list:

Re: [PATCH nft] src: add netdev family support

2015-05-26 Thread Patrick McHardy
On 25.05, Pablo Neira Ayuso wrote: > diff --git a/include/rule.h b/include/rule.h > index 97959f7..06ec2ff 100644 > --- a/include/rule.h > +++ b/include/rule.h > @@ -72,6 +72,7 @@ enum table_flags { > * > * @list:list node > * @handle: table handle > + * @dev: network device name (on

[PATCH nft] src: add netdev family support

2015-05-25 Thread Pablo Neira Ayuso
This patch adds support for the new 'netdev' table. So far, this table allows you to create filter chains from ingress. The following example shows a very simple base configuration with one table that is bound to device 'eth0' with a single ingress chain: # nft list table netdev eth0 table netd