On Tue, Dec 08, 2020 at 04:39:24PM -0500, Brett Mastbergen wrote: > Since commit 656c8e9cc1ba ("netfilter: conntrack: Use consistent ct id > hash calculation") the ct id will not change from initialization to > confirmation. Removing the confirmation check allows for things like > adding an element to a 'typeof ct id' set in prerouting upon reception > of the first packet of a new connection, and then being able to > reference that set consistently both before and after the connection > is confirmed. Applied, thanks.