On Fri, 2011-02-11 at 15:24 -0600, Chris Friesen wrote: > It has been proposed to add a custom patch to clear the mark for all > marked connections--is there a better way of doing this? > How about using the conntrack userspace command-line interface? conntrack -U -m 0 looks like it should do what you want. Andy -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html