Re: [PATCH nf-next] netfilter: conntrack: remove flowtable early-drop test

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Vlad Buslov <vladbu@xxxxxxxxxx> wrote:
> The change will also enable early dropping offloaded non-ASSURED
> connections for all other protocols though.

But I don't think we support that.
act_ct supports offload of non-assured (unidirectional) UDP.

But TCP needs to have seen two-way communication.
So, AFAICT the check isn't needed.




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux