Todd Seidelmann <[email protected]> wrote:
> Simplify the check in physdev_mt_check() to emit an error message
> only when passed an invalid chain (ie, NF_INET_LOCAL_OUT).
> This avoids cluttering up the log with errors against valid rules.
> 
> For large/heavily modified rulesets, current behavior can quickly
> overwhelm the ring buffer, because this function gets called on
> every change, regardless of the rule that was changed.

Agreed, we've had this notice long enough, better to only
print it when we reject the rule.

Acked-by: Florian Westphal <[email protected]>

Reply via email to