Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> wrote on 05/24/2012 04:11:56 PM: > On Thu, May 24, 2012 at 12:17:55PM +0200, Pablo Neira Ayuso wrote: > > My main objection with this patch is that it adds more code out of the > > scope of the nf_queue handling to nf_hook_slow. And this is done for > > very specific purpose. > > > > @David, @Eric: Krishna aims to provide a mechanism that can be enabled > > to accept packets if the nfqueue becomes full, ie. it changes the > > default behaviour under congestion from drop to accept. It seems some > > users prefer not to block traffic under nfqueue congestion. > > Florian Westphal just proposed some possible interesting solution for > this. Yes, and I have just finished testing this and it works fine. With this, all the changes are localized to nfnetlink_queue.c. I am doing some more tests before resubmitting this. thanks, - KK -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
