On Mon, Aug 30, 2021 at 07:21:14PM +0200, Pablo Neira Ayuso wrote: [...] > Look: If we want to fix this right(tm), we should update > payload_try_merge() to actually remove this redundant dependency at > rule load time, instead of doing this lazy dependency removal at > listing time. Or actually, this match statement could be just canceled from the evaluation phase for these cases: ip family meta protocol ip ip6 family meta protocol ip6