From: Eric Dumazet <eric.dumazet@xxxxxxxxx> Date: Wed, 22 May 2013 14:01:06 -0700 > From: Eric Dumazet <edumazet@xxxxxxxxxx> > > With IP early demux added in linux-3.6, we perform TCP lookup in IP > layer before iptables hooks. > > We can avoid doing a second lookup in xt_socket. > > Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx> Acked-by: David S. Miller <davem@xxxxxxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
