Eric Leblond wrote: > Overrun handling work by dumping the whole connection tracking table after an > overrun. This is correct if the local hash is used but could be really bad if > it is not the case. All entries would be flushed through the stack and arrive > to the output module. In the case of a syslog or logemu module this will cause > massive and useless message printing. > > This patch modify the code by activating overrun handling if and only if the > local hash is used (hash_enable=1 which is the default). Applied. Thanks. -- "Los honestos son inadaptados sociales" -- Les Luthiers -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html