diff options
author | Florian Westphal <fw@strlen.de> | 2011-09-06 13:48:25 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@gnumonks.org> | 2011-09-06 13:48:25 +0200 |
commit | 4b3d0a4763b440ef748d537d86f0869d09544ab2 (patch) | |
tree | 221310ec15b98e8191011a3ff6dad504a78765ca /utils | |
parent | 1154021c599257edf2c3dcb4d29f6b4dcb67643a (diff) |
src: add notes on NF_STOLEN and NF_REPEAT to documentation
The verdict NF_STOLEN must not be used.
When using NF_REPEAT, one way to prevent re-queueing of the
same packet is to also set an nfmark using nfq_set_verdict2,
and set up the nefilter rules to only queue a packet when the
mark is not (yet) set.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@gnumonks.org>
Diffstat (limited to 'utils')
0 files changed, 0 insertions, 0 deletions