Mr. Jozsef, I am currently writing my conntrack expiration patch for the non-newnat version of the conntrack core. When I examined the core on ways to properly destroy a connection entry, I found several:
ct->ct_general->destroy() skb->nfct->master->destroy() destroy_conntrack() ip_conntrack_put() nf_conntrack_put() Which one of these will properly destroy a connection entry and notify the NAT subsystem as well? (I seem to be torn between skb->nfct->master->destroy() and destroy_conntrack()) Thanks, Brad ===== Brad Chapman Permanent e-mail: [EMAIL PROTECTED] Current e-mail: [EMAIL PROTECTED] Alternate e-mail: [EMAIL PROTECTED] __________________________________________________ Do You Yahoo!? Yahoo! Greetings - Send FREE e-cards for every occasion! http://greetings.yahoo.com