On Fri, Nov 14, 2014 at 01:21:48PM +0100, Florian Westphal wrote: > Currently all the conntrack lookups are done using default zone. > In case the skb has a ct attached (e.g. template) we should use this zone > for lookups instead. This makes connlimit work with connections assigned > to other zones. Applied to nf-next, thanks Florian! -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html