On 13/01/11 12:28, Patrick McHardy wrote: > On 13.01.2011 12:23, Pablo Neira Ayuso wrote: >> Hi Eric, >> >> On 13/01/11 12:13, Eric Dumazet wrote: >>> ipt_CLUSTERIP users might hit this annoying printk, if they forgot an >>> "iptables -I INPUT -m state --state INVALID -j DROP" before CLUSTERIP >>> rule. We could use net_ratelimit() here, or not log the message at all. >>> I chose to log it once per config. >> >> I think that this should be converted to pr_debug() instead, there's >> also another reference to "unknown protocol" that should be converted as >> well. > > I think the FIXME could also be removed, we *do* drop invalid > packets in CLUSTERIP. Hey! You're back! :-) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
