On Wednesday 2009-08-26 14:55, Patrick McHardy wrote: >Pascal Hambourg wrote: >> Hello, >> >> May I ask what are the reasons for a helper to drop packets ? > >Mainly parsing errors, memory allocation errors and bugs. I am not so quite sure whether parsing errors (like, a port > 65535 for FTP) should cause them to be dropped; after all, it might be, for example, a vendor-specific form of a protocol that just does not fit the nf_conntrack_ftp parsing exactly. That is to say, packets should be let through, though without setting up expectations. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
