On Friday 2010-04-16 12:37, Subhadeep Ghosh wrote: > >The first and the second steps are no-brainers. However, I don't know >if I need to drop the original packet or mark it as stolen. And I >definitely don't know how to resolve the fourth point. It would be >great if anyone could point me in the right direction. NF_DROP will cause netfilter to free it when the hooks are done; with NF_STOLEN, you have ownership of the skb and need to free it yourself. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html