src: add notes on NF_STOLEN and NF_REPEAT to documentation
authorFlorian Westphal <fw@strlen.de>
Tue, 6 Sep 2011 11:48:25 +0000 (13:48 +0200)
committerr.kubiak <r.kubiak@samsung.com>
Mon, 16 Nov 2015 13:12:06 +0000 (14:12 +0100)
commitc17c4b2edf6811c49253ff132f28333c9917ca1d
tree221310ec15b98e8191011a3ff6dad504a78765ca
parent2c190631fe9051b6a66a048b1422facc8c82130f
src: add notes on NF_STOLEN and NF_REPEAT to documentation

The verdict NF_STOLEN must not be used.

When using NF_REPEAT, one way to prevent re-queueing of the
same packet is to also set an nfmark using nfq_set_verdict2,
and set up the nefilter rules to only queue a packet when the
mark is not (yet) set.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@gnumonks.org>
src/libnetfilter_queue.c