The conntrack match extension doesn't handle address inversion correctly. (Tom Eastep)
1 file changed