On Mon, Feb 18, 2019 at 10:02:52AM +0100, Florian Tham wrote: > Hello Pablo, > > On 2/15/19 3:39 PM, Pablo Neira Ayuso wrote: > > On Thu, Feb 14, 2019 at 12:30:41PM +0100, Florian Tham wrote: > >> @@ -168,7 +173,7 @@ > >> } > >> > >> static const struct nf_conntrack_expect_policy amanda_exp_policy = { > >> - .max_expected = 3, > >> + .max_expected = 4, > > > > Why rise this to 4? This is the maximum number of active expectation. > > Expectations go away as soon as they are confirmed by a matching > > connection. > > I assumed max_expected to refer to the max number of related connections > to expect. If this is not correct, I will drop this change and test again. This is the maximum number of alive expectations. Once the expectation is confirmed, you could have as many related connections as you want.