On Fri, 27 Nov 2009, Changli Gao wrote: > On Fri, Nov 27, 2009 at 5:25 PM, Jozsef Kadlecsik > <kadlec@xxxxxxxxxxxxxxxxx> wrote: > > > > On Fri, 27 Nov 2009, Changli Gao wrote: > > > > > > I don't see how can the condition be true. The first reply > > packet checked here and if that's a pure ACK, then the new_state cannot be > > TCP_CONNTRACK_ESTABLISHED (except for picked up connections). > > Yes, as nf_conntrack_tcp_timeout_loose_unreply implied, it is for > picked up connections. Connection pickup can be disabled by proper rules or by setting nf_ct_tcp_loose to zero. So in which environment this third method is required? I'm curious what triggered you to write your patch. Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
