> As an aside, we could even add a note to the relevant man page saying > that the IPv6 DSCP mangle code used to be broken but not anymore (it has > been done before). That sounds reasonable - especially if we make it clear which versions of the kernel are affected. Unfortunately, people upgrade kernel and utilities seperately... [theoretically iptables could detect kernel version and automatically invert the mask for too old kernels...] -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html