Hi again, Dave! On Sat, Jul 19, 2003 at 04:26:48PM +0200, Harald Welte wrote: > This is the first of my 2.6 merge of the recent bugfixes (all tested > against 2.6.0-test1). You might need to apply them incrementally > (didn't test it in a different order). Unfortunately I introduced a typo during the merge (which in turn introduced a new bug). Please incrementially apply the following patch, thanks. --- linux-2.6.0-test1-nftest5/net/ipv4/netfilter/ipt_MIRROR.c 2003-07-19 16:13:56.000000000 +0200 +++ linux-2.6.0-test1-nftest6/net/ipv4/netfilter/ipt_MIRROR.c 2003-07-19 17:35:23.000000000 +0200 @@ -173,7 +173,7 @@ /* Don't let conntrack code see this packet: * it will think we are starting a new * connection! --RR */ - ip_direct_send(*pskb); + ip_direct_send(nskb); return NF_DROP; } [now really off for OLS]. -- - Harald Welte http://www.netfilter.org/ ============================================================================ "Fragmentation is like classful addressing -- an interesting early architectural error that shows how much experimentation was going on while IP was being designed." -- Paul Vixie