> Not your fault, but I think we should also check for ... > > ... || skb->sk->sk_state == TCP_TIME_WAIT) > > since early demux was introduced, we may have skb->sk pointing to a > timewait socket. Ok, I'll cook a 2nd version of this patch later. /Holger -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html