On Sun, Mar 31, 2019 at 01:24:52PM +0300, Julian Anastasov wrote: > We can receive ICMP errors from client or from > tunneling real server. While the former can be > scheduled to real server, the latter should > not be scheduled, they are decapsulated only when > existing connection is found. Applied, thanks.