On Fri, Sep 02, 2016 at 11:08:48AM +0200, Florian Westphal wrote: > I - discard extra nfct entry when cloning. Works, but obviously not > compatible in any way (the clones are INVALID). This approach is simple and it would only break when packets are flooded to all ports, actually this is not working anyway because of clashes at confirm, right? -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html