2015-11-09 17:30 GMT+01:00 Patrick McHardy <kaber@xxxxxxxxx>: > [ ... ] > Any thoughts about this? Could it be possible to automagically insert an "hiden notrack" for the same packets the synproxy target matches when adding it? Ofcorse depends on what this cost really is in terms of performance, but I dont like the idea of sacrificing performance for a little easier use. Atleast not for this module, where the whole point of it beeing able to deal with big pps numbers -- Bj(/)rnar -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html