Hi, Am i right in assuming match checkentry functions should be totally reentrant? What about on UP systems? I read in ip_tables.c (iirc) that 2 packets can be traversing iptables for each CPU.
Currently the skip/shift tables are implemented as a global variable, they are too big to go on the stack. If I do one global variable per cpu, will this make it SMP safe? Any thoughts? -- // Gianni Tedesco <[EMAIL PROTECTED]> 80% of all email is a figment of procmails imagination.