[Bug 64] Conntrack-Table is not cleared on inferface down using target MASQUERADE

bugzilla-daemon@netfilter.org
Sat, 05 Apr 2003 23:30:57 -0000

------- Additional Comments From tobias@portfolio16.de  2003-04-06 01:30 -------
OK, now I had time testing the 2.4.20 kernel with the patch. And yes, it has
gotten
much better. Not all connections are cleared, but much more then before.

tobias@lafiel:~$ wc -l ip_conntrack
    613 ip_conntrack
tobias@lafiel:~$ grep -v "192\.168\.2\." ip_conntrack | grep -v
"127\.0\.0\.1" | grep -v
"A\.B\.C\.D" | wc -l
     41

Seems to be a better ratio... Ideally this should be 0, right?