HI, > I can fix this by adding the nf_ct_is_confirmed() check, but then you > can only create an expectation from the first packet. I guess this is > fine for your usecase, right? Well, I must say that I actually never used the expectations, and probably will not use it before long. So, of course, you can add the check. Thank you. -- Bien cordialement, / Plej kore, Stéphane Veyret
