forward expression currently clones the skb, then forwards the clone and returns NF_DROP to the core. First patch allows using NF_STOLEN from ingress/netdev hook, 2nd patch adds a new helper that then forwards the original skb. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html