> I've only had a cursory look at your patch, but how is it> different from what's in xt_SECMARK.c ?xt_SEXMARK.c is for xtables, use-able in iptables; this is for nftables (nft)