From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pablo Neira Ayuso Subject: Re: [PATCH nf-next v3 1/3] netfilter: nf_conntrack: push zone object into functions Date: Mon, 3 Aug 2015 17:59:09 +0200 Message-ID: <20150803155909.GA17212@salvia> References: <2f95183cf2520b93d8443be935372fbef3499b96.1437561897.git.daniel@iogearbox.net> <20150730160744.GA15008@salvia> <55BA5228.6050908@iogearbox.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: tgraf@suug.ch, challa@noironetworks.com, netfilter-devel@vger.kernel.org To: Daniel Borkmann Return-path: Received: from mail.us.es ([193.147.175.20]:44309 "EHLO mail.us.es" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1754238AbbHCPxO (ORCPT ); Mon, 3 Aug 2015 11:53:14 -0400 Content-Disposition: inline In-Reply-To: <55BA5228.6050908@iogearbox.net> Sender: netfilter-devel-owner@vger.kernel.org List-ID: On Thu, Jul 30, 2015 at 06:34:48PM +0200, Daniel Borkmann wrote: > CTA_ZONE_DIR seems better, sure. I don't have any other extensions at > the moment, but it seems it makes sense to make this nested at this > point in time, so we have CTA_ZONE and CTA_ZONE_INFO as a container > for CTA_ZONE_DIR and whatever future might bring. I will look into it. thinking it well, this is part of the tuple, so I'd suggest you add CTA_TUPLE_ZONE to enum ctattr_tuple. We will probably need later to place each tuple in different zones.