On Thursday 2008-09-04 22:58, Alexey Dobriyan wrote: >In conntrack_mt_v0() "ct->status" can be used even for untracked connection, >is this right? Yes. >For example, does setting IPS_NAT_DONE_MASK and IPS_CONFIRMED_BIT on >untracked conntracked really necessary? Does it even happen? Something smells afoul if ct->status is anything but zero/unset for the untracked entry. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html