From: Jonathan Morton <chromatix99@xxxxxxxxx> Date: Wed, 23 May 2018 23:33:04 +0300 > Now I'm *really* confused. > > Are you saying that the user has to set up their own conntrack > mechanism using extra userspace commands? Because complicating the > setup process that way runs directly counter to Cake's design > philosophy. I mean not anything filtering or firewall related. We have a full flow dissector in the networking core, which often runs on every RX packet anyways. Record what we need and use it on egress after NAT has occurred. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
