From: Eric Dumazet <dada1@xxxxxxxxxxxxx> Date: Sat, 15 Dec 2007 12:04:47 +0100 > I prefer to let admins chose their size, since it makes attacker life more > difficult :) > > For example, I can tell you I have a server, were size is between 2.000.000 > and 3.500.000, I dont want to be forced to use 2097152 > > A multiply is cheap, at least on current hardware. I agree, and I see nothing wrong with Eric's patch and it should be merged ASAP. - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html