Hi all, Could anybody let me know what actual difference the targets NF_DROP and NF_STOLEN make to the kernel? As far as I know, both of them tell the kernel to forget the packet. In "Linux netfilter Hacking HOWTO", it says NF_DROP tells netfilter to drop the packet, and NF_STOLEN tells netfilter that the registered module has taken over the packet. I don't fully understand what the module can do to the packet by taking over it and how. Can anyone be kind enough to explain this or show me an example that a module takes over packets and does something to them? Thanks a lot in advance! Regards, Jee
