On Tue, May 1, 2018 at 8:50 PM, Kristian Evensen <kristian.evensen@xxxxxxxxx> wrote: > Does anyone have any idea of what could be wrong, where I should look > or other things I can try? I tried to space the requests out a bit in > time (I inserted a sleep 1 between them), and then the problem went > away. I should learn to always go through everything one last time before sending an email. First of all, I see that both requests are treated as new. Second, on my router, new requests are sent to user space for marking, which explains the large delay in processing. When removing the NFQUEUE-rule + handling and marking statically, my problem goes away and I get an answer for both packets. However, I do have one question. In my application, both packets are assigned the same mark. Shouldn't they then match the same conntrack entry, or am I missing something since that seems not to be the case? BR, Kristian -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html