On Thursday 2011-01-13 14:38, Eric Dumazet wrote: >Le jeudi 13 janvier 2011 Ã 12:54 +0100, Pablo Neira Ayuso a Ãcrit : > >> But printing this does not provide any useful information. The first >> packet that does not belong to the cluster node that has received the >> packet, or the first invalid packet, will trigger this. >> >> Moreover, this confuses users since they can do nothing if they receive >> this message. >> >> Moreover, this target should be supersedes by the cluster match, which >> has been there for quite some time (it's also more flexible). > >Now you mentioned it, cluster match is not as flexible right now, >its hashing is on source_ip only. I think in that case, xt_cluster should be improved rather than an old module. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html