On Mon, Jul 28, 2025 at 06:25:14PM +0800, Lance Yang wrote: > From: Lance Yang <lance.yang@xxxxxxxxx> > > When no logger is registered, nf_conntrack_log_invalid fails to log invalid > packets, leaving users unaware of actual invalid traffic. Improve this by > loading nf_log_syslog, similar to how 'iptables -I FORWARD 1 -m conntrack > --ctstate INVALID -j LOG' triggers it. JFYI: I ended up taking v2 into nf-next, let me know if there is any issue with your previous version, thanks.