> That is impossible! A packet is in one and only one state. > Ah, right! So, if packet is invalid, regardless of whether it is new or not, its ctstate is INVALID, is that so? If that is the case then, you should amend the patch you send me to mark packets with invalid state only as these are the ones I am interested in (you may keep the :NI as extra option by all means, but in my specific case I would need INVALID only).
------------------------------------------------------------------------------ Simplify data backup and recovery for your virtual environment with vRanger. Installation's a snap, and flexible recovery options mean your data is safe, secure and there when you need it. Discover what all the cheering's about. Get your free trial download today. http://p.sf.net/sfu/quest-dev2dev2 _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
