On Sun, Jun 22, 2003 at 11:42:52AM +0200, Jean-Francois Dive wrote: > > Hopefully, when a policy is added, it is done the same way both in IN/OUT/FW (or only > the direction=inbound in IN, both in FW, and direction=outbound in OUT). Well from what I can see, the kernel will not verify forwarded packets if you don't add policies to the FWD policy list. What I want to know is whether this is intentional. Of course I'd also be content if someone could just point out that I have totally misread the code :) -- Debian GNU/Linux 3.0 is out! ( http://www.debian.org/ ) Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt - : send the line "unsubscribe linux-net" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html