Hi Harald,

this patch for 2.6 clears nf_debug in ip_local_deliver_finish so the
"hook ... already set" message in nf_hook_slow won't get triggered for
decapsulated ipsec-tunnel packets when passing them through the network
stack again.

Best regards,
Patrick