Patrick McHardy wrote, at 01/13/2010 04:27 PM: >> Should end hosts which are using conntrack send a fragment reassembly time exceeded message? > > Yes, they should. OK. Please ignore the patch, because the patch is wrong. With the patch, a router also send a fragment reassembly time exceeded message when reassembling timeout. I'll make a new patch to fix the problem. After testing, then submit it. -- Best Regards ----- Shan Wei -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html