I wrote the netfilter PPTP helper. A user alerted me to an issue: they were using the linux box as a PPTP client in addition to masquerading PPTP connections through the box.
My protocol helper gre_new() is called whenever a new GRE connection is found. I was expecting this to be called only for the GRE packets that were masqueraded, but of course it is called for those related to the local PPTP client also. Question is what is the appropriate thing to do when I decide the GRE packet in question is not part of a masq'ed connection? I notice the other helpers (TCP, UDP) return a timeout of 1. Is this a resonable thing to do in this case also? Thanks, Brian __________________________________________________ Do You Yahoo!? Yahoo! Sports - Coverage of the 2002 Olympic Games http://sports.yahoo.com