Hi Pablo,

I could understand the ctinfo is IP_CT_RELATED_REPLY when reject with
ICMP. Because ICMP reply does not belong to the original conntrack.

But why it is IP_CT_RELATED_REPLY too when reject with TCP RST?
The RST reply should belong the original conntrack.

Is it expected or one bug? If it is one bug, I could try to fix it.

To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majord...@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Reply via email to