Hi Patrick, Michael M. Builov reported several problems with the TCP option handling code in the TCP connection tracking code. The next patches, based on his suggestions, solve all the issues. Please apply them as bugfixes. Best regards, Jozsef Jozsef Kadlecsik (2): Incorrect handling of invalid TCP option in TCP connection tracking Wrong multiplication of TCPOLEN_TSTAMP_ALIGNED in tcp_sack skips fastpath net/netfilter/nf_conntrack_proto_tcp.c | 6 +++--- 1 files changed, 3 insertions(+), 3 deletions(-) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html