Am 21.09.2010 11:34, schrieb Pablo Neira Ayuso: > This patch improves the situation in which the expectation table is > full for conntrack NAT helpers. Basically, we give up if we don't > find a place in the table instead of looping over nf_ct_expect_related() > with a different port (we should only do this if it returns -EBUSY, for > -EMFILE or -ESHUTDOWN I think that it's better to skip this). Indeed, this makes a lot more sense than our current behaviour. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
