Qingjie Xing <xqjcool@xxxxxxxxx> wrote: > When deleting an xt_CT rule, its per-rule template conntrack is freed via > nf_ct_destroy() -> nf_ct_tmpl_free(). If an expectation was created with > that template as its master, Uhm. How can that happen? A template isn't a connection, so it should not be able to create an expectation.
