35a75baff6
state is not applicable. The fix just reverts the new code that blocked packets where fr_addstate() fails. This is not correct in all cases, but blocking them is a bit drastic and breaks existing functionality. The proper fix is to change fr_addstate() to return: - state added - adding state failed - adding state is not applicable and then filter packets only in the second case. I am leaving this for someone else.