On Wed, 12 Dec 2012, Andrew Collins wrote: > The MASQUERADE target now handles routing changes which affect > the output interface of a connection, but only for ESTABLISHED > connections. It is also possible for NEW connections which > already have a conntrack entry to be affected by routing changes. > > This adds a check to drop entries in the NEW+conntrack state > when the oif has changed. > > Signed-off-by: Andrew Collins <bsderandrew@xxxxxxxxx> Acked-by: Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx> Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlecsik.jozsef@xxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html