On Thu, 5 Jan 2017 14:34:58 +0200, Amir Vadai wrote: > This is a simple action. It is not fool proof - it prevents the user > from getting out of packet bounds, but it is the user responsibility to > provide valid rules.
I think I can live with that. Just wanted to point that out. Especially with combination with hardware offload (e.g. the hardware should not hang or reset on that). Jiri
