On 19/05/2020 18:19, Pablo Neira Ayuso wrote: > This is breaking netfilter again. Still waiting for you to explain what this "breaks". AFAICT the new DONT_CARE has exactly the same effect that the old DONT_CARE did, so as long as netfilter is using DONT_CARE rather than (say) a hard-coded 0, it should be fine.
