Bring together the three performance improvements suggested. 1) RCU for ip_tables entries 2) mod_timer_noact for conntrack timer 3) eliminate tcp_lock I took the patches for 2 & 3 and made them build and basically work. This patch set is against Patrick's netfilter next tree since it is where it should end up. git.kernel.org:/pub/scm/linux/kernel/git/kaber/nf-next-2.6.git -- -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html