Re: url filtering with netfiler

2018-08-11 Thread Saber Rezvani
On 08/12/2018 12:24 AM, Oleg wrote: On Sat, Aug 11, 2018 at 12:15:26PM +0200, Pablo Neira Ayuso wrote: We used to have mmap for nfq but that was removed because there was no performance gain from it. Interesting. I didn't know about it. Was that a work without kernelspace to userspace

Re: url filtering with netfiler

2018-08-11 Thread Oleg
On Sat, Aug 11, 2018 at 12:15:26PM +0200, Pablo Neira Ayuso wrote: > We used to have mmap for nfq but that was removed because there was no > performance gain from it. Interesting. I didn't know about it. Was that a work without kernelspace to userspace copying? > I think it's unlikely we'll

Re: [PATCH 3/3 nft] src: osf: import nfnl_osf.c to load osf fingerprints

2018-08-11 Thread Fernando Fernandez Mancera
On 08/11/2018 12:03 PM, Pablo Neira Ayuso wrote: +#endif /* _NF_OSF_H */ diff --git a/include/nfnl_osf.h b/include/nfnl_osf.h new file mode 100644 index 000..d9287e9 --- /dev/null +++ b/include/nfnl_osf.h @@ -0,0 +1,6 @@ +#ifndef _NFNL_OSF_H +#define _NFNL_OSF_H + +int

[PATCH v2] nft: doc: Fixed typos in asciidoc

2018-08-11 Thread Arushi Singhal
Correct all the typo mistakes done while converting man page source to asciidoc. Signed-off-by: Arushi Singhal --- changes in v2 -submit the patch on top of current git HEAD doc/data-types.txt | 2 +- doc/nft.txt| 6 +++--- doc/primary-expression.txt | 2 +-

Re: url filtering with netfiler

2018-08-11 Thread Pablo Neira Ayuso
On Fri, Aug 10, 2018 at 04:50:09PM +0300, Oleg wrote: > On Fri, Aug 10, 2018 at 02:01:25PM +0200, Pablo Neira Ayuso wrote: > > On Thu, Aug 02, 2018 at 10:44:14PM +0300, Oleg wrote: > > > On Thu, Aug 02, 2018 at 06:44:26PM +0430, Saber Rezvani wrote: > > > IMHO, this can be easier implemented with

Re: [PATCH 3/3 nft] src: osf: import nfnl_osf.c to load osf fingerprints

2018-08-11 Thread Pablo Neira Ayuso
On Fri, Aug 10, 2018 at 03:02:00PM +0200, Fernando Fernandez Mancera wrote: > Import iptables/utils/nfnl_osf.c into nftables tree with some changes in order > to load OS fingerprints automatically from pf.os file. > > Signed-off-by: Fernando Fernandez Mancera > --- >