Phil Sutter <phil@xxxxxx> wrote: > I tried, but nf_ct_pernet() is not usable from module context, or > actually symbol nf_conntrack_net_id. So I had to introduce a routine to > set the value. On the other hand I didn't like the fact that it would > permanently disable the warning even after 'nft flush ruleset' > (nit-picking). > I can recover that approach and send a v2 if you think (re-)using refcnt > is a bad idea here. I think its a good idea to add a helper function disable the warning. We can also call it from xt_CT.c.