On Fri, May 27, 2005 at 12:03:08PM +0100, Keir Fraser wrote: > The TCP/UDP connection-tracking code in netfilter validates the > checksum of incoming packets, to prevent nastier errors further down > the road. This check is unnecessary if the skb is marked as > CHECKSUM_UNNECESSARY. It seems at least part of this has already been merged in 2.6.12-rc http://www.kernel.org/git/gitweb.cgi?p=linux/kernel/git/torvalds/linux-2.6.git;a=blobdiff;h=721ddbf522b422d554479a7ab15c0955798f16ee;hp=2b87c1974be605d5bdb1ee769188d7e03fb2ddc8;hb=31da185d8162ae0f30a13ed945f1f4d28d158133;f=net/ipv4/netfilter/ip_conntrack_proto_tcp.c Phil _______________________________________________ Xen-devel mailing list Xen-devel@xxxxxxxxxxxxxxxxxxx http://lists.xensource.com/xen-devel