Brett Mastbergen <brett.mastbergen@xxxxxxxxx> wrote: > Since commit 656c8e9cc1ba ("netfilter: conntrack: Use consistent ct id > hash calculation") the ct id will not change from initialization to > confirmation. Removing the confirmation check allows for things like > adding an element to a 'typeof ct id' set in prerouting upon reception > of the first packet of a new connection, and then being able to > reference that set consistently both before and after the connection > is confirmed. Acked-by: Florian Westphal <fw@xxxxxxxxx>