On Wed, May 22, 2013 at 02:27:33PM -0700, David Miller wrote: > From: Eric Dumazet <eric.dumazet@xxxxxxxxx> > Date: Wed, 22 May 2013 14:01:06 -0700 > > > From: Eric Dumazet <edumazet@xxxxxxxxxx> > > > > With IP early demux added in linux-3.6, we perform TCP lookup in IP > > layer before iptables hooks. > > > > We can avoid doing a second lookup in xt_socket. > > > > Signed-off-by: Eric Dumazet <edumazet@xxxxxxxxxx> > > Acked-by: David S. Miller <davem@xxxxxxxxxxxxx> Applied to nf-next, thanks! -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html