From: KOVACS Krisztian <hidden@xxxxxxxxxx> Date: Tue, 18 Oct 2011 22:17:35 +0200 > The transparent socket option setting was not copied to the time wait > socket when an inet socket was being replaced by a time wait socket. This > broke the --transparent option of the socket match and may have caused > that FIN packets belonging to sockets in FIN_WAIT2 or TIME_WAIT state > were being dropped by the packet filter. > > Signed-off-by: KOVACS Krisztian <hidden@xxxxxxxxxx> I can't believe such a fundamental bug went unspotted for so long :-) I'll apply this, thanks. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html