Christoph Paasch wrote: > As NF_DROP = 0, no packets would ever have been dropped. Good catch. I'll also change -NF_DROP by NF_DROP in nf_conntrack_proto_tcp.c. No need to resend the patch. Thanks. -- "Los honestos son inadaptados sociales" -- Les Luthiers -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html