On Fri, Sep 02, 2016 at 11:58:53AM +0200, Pablo Neira Ayuso wrote: > On Fri, Sep 02, 2016 at 11:08:48AM +0200, Florian Westphal wrote: > > I - discard extra nfct entry when cloning. Works, but obviously not > > compatible in any way (the clones are INVALID). > > This approach is simple and it would only break when packets are > flooded to all ports, actually this is not working anyway because of > clashes at confirm, right?
Hm, what about attaching the notrack conntrack for this case? -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
