On Thu, May 20, 2021 at 08:00:53PM +0200, Stéphane Veyret wrote: > HI, > > > I can fix this by adding the nf_ct_is_confirmed() check, but then you > > can only create an expectation from the first packet. I guess this is > > fine for your usecase, right? > > Well, I must say that I actually never used the expectations, and > probably will not use it before long. So, of course, you can add the > check. No problem. The limitation (only allowing to create the expectation from the first packet) should be relatively easy to remove by adding an action to attach a "dummy" helper. Thanks.
