Hi, On Fri, Aug 02, 2013 at 11:18:54AM +0800, Henry Lee wrote: [...] > I wouldn't use a timestart == timestop rule manually. But if I > create iptables rules in a program or a script, this case may > happen. > Rejecting this rule seems a little bit harsh, in my opinion, since > it doesn't look so unacceptable. I cannot take this patch since others may be relaying in the current behaviour. You'll have to fix your script/program to catch that case and avoid it. Regards. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html