Jamal Hadi Salim <j...@mojatatu.com> wrote: > 2) the ACT_QUEUED vs STOLEN was supposed to have semantics of something > that was stolen (eg redirection should definetely have been returning > STOLEN not QUEUED); something that queues for later re-injection > (with any/all metadata) was intended to use QUEUED. I believe netfilter > may have followed suit and introduced similar codes (so it would be > interesting to see how they use them).
Hooks (Targets) don't queue themselves, i.e. NF_QUEUE tells the netfilter core that the skb is to be handed off to nf_queue machinery, while NF_STOLEN is the more obvious "don't touch this skb ever again". -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
