On Thu, May 24, 2012 at 12:17:55PM +0200, Pablo Neira Ayuso wrote: > My main objection with this patch is that it adds more code out of the > scope of the nf_queue handling to nf_hook_slow. And this is done for > very specific purpose. > > @David, @Eric: Krishna aims to provide a mechanism that can be enabled > to accept packets if the nfqueue becomes full, ie. it changes the > default behaviour under congestion from drop to accept. It seems some > users prefer not to block traffic under nfqueue congestion. Florian Westphal just proposed some possible interesting solution for this. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
