From: Shan Wei <shanwei@xxxxxxxxxxxxxx> Date: Tue, 26 Jan 2010 10:31:16 +0800 > > IPv6 connection track and IPv6 stack separately use a different queue to > manage received fragments. So using protocol-related match routine. > > > Signed-off-by: Shan Wei <shanwei@xxxxxxxxxxxxxx> This problem was also introduced by: commit 0b5ccb2ee250136dd7385b1c7da28417d0d4d32d Author: Patrick McHardy <kaber@xxxxxxxxx> Date: Tue Dec 15 16:59:18 2009 +0100 ipv6: reassembly: use seperate reassembly queues for conntrack and local delivery Currently the same reassembly queue might be used for packets reassembled by conntrack in different positions in the stack (PREROUTING/LOCAL_OUT), as well as local delivery. This can cause "packet jumps" when the fragment completing a reassembled packet is queued from a different position in the stack than the previous ones. Add a "user" identifier to the reassembly queue key to seperate the queues of each caller, similar to what we do for IPv4. Signed-off-by: Patrick McHardy <kaber@xxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html