On 02/14/2011 11:42 AM, Eric Blake wrote:
On 02/14/2011 08:07 AM, Stefan Berger wrote:
> This patch reorders the connlimit and comment match extensions relative
> to the state match (-m state); connlimit being most useful if found
> after a -m state --state NEW and not before it.
>
> Signed-off-by: Stefan Berger<stefanb(a)linux.vnet.ibm.com>
>
> ---
> src/nwfilter/nwfilter_ebiptables_driver.c | 38
> ++++++++++++++++++++++++++++--
> 1 file changed, 36 insertions(+), 2 deletions(-)
ACK. I think this is low enough risk to include in 0.8.8.
Pushed.
Stefan