Jan Engelhardt wrote: > [NETFILTER]: xt_hashlimit: add workaround for >>32 case > > Hardware surprisingly does nothing when a 32-bit right-shift is > to be done. Worse yet, compilers do not even work around it. Thats because the C standard states that the result is undefined. Anyways, I think this patch is slightly nicer because it gets rid of the double negation and the %32 == 0 special-casing for IPv6. Do you want to add an ACKed-by?