On Jeu 12 mai 2005 12:42, Lee Sanders a écrit : > Interesting because in the L7 FAQ it says they take advantage of > netfilters > connection tracking capabilities to classify connections based on their > first > few packets and then classify packets based on what connection they are > in. > > To my thinking this precludes what you say above, but I don't know much > about > netfilters connection tracking. Have you seen the behaviour you describe ? > I have not seem the problem occur. However, the webpage gives a warning and recommends not to use l7 matching to DROP packets. It should not be a problem if you only want to shape. Sylvain _______________________________________________ LARTC mailing list LARTC@xxxxxxxxxxxxxxx http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc