I've discovered a bug in same_is while fixing deletion in CLUSTERIP. CLUSTERIP has to define a different userspacesize for the private target info because of the config pointer, this should be enough to fix rule deletion but the function same_is returns a wrong pointer to the comparation mask array since it doesn't add the size of ipt_entry. Because of that, target_same returns 0 and no rule matches. Impact: This just affects rule deletion with targets that has userspacesize != size. -- Pablo