On 13.01.2011 12:23, Pablo Neira Ayuso wrote: > Hi Eric, > > On 13/01/11 12:13, Eric Dumazet wrote: >> ipt_CLUSTERIP users might hit this annoying printk, if they forgot an >> "iptables -I INPUT -m state --state INVALID -j DROP" before CLUSTERIP >> rule. We could use net_ratelimit() here, or not log the message at all. >> I chose to log it once per config. > > I think that this should be converted to pr_debug() instead, there's > also another reference to "unknown protocol" that should be converted as > well. I think the FIXME could also be removed, we *do* drop invalid packets in CLUSTERIP. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
