From: Jozsef Kadlecsik Date: Thu, 25 Mar 2010 10:17:26 +0000 (+0100) Subject: netfilter: ip6table_raw: fix table priority X-Git-Tag: v2.6.34-rc3~33^2~6^2~1 X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=9c13886665c43600bd0af4b38e33c654e648e078;p=pandora-kernel.git netfilter: ip6table_raw: fix table priority The order of the IPv6 raw table is currently reversed, that makes impossible to use the NOTRACK target in IPv6: for example if someone enters ip6tables -t raw -A PREROUTING -p tcp --dport 80 -j NOTRACK and if we receive fragmented packets then the first fragment will be untracked and thus skip nf_ct_frag6_gather (and conntrack), while all subsequent fragments enter nf_ct_frag6_gather and reassembly will never successfully be finished. Singed-off-by: Jozsef Kadlecsik Signed-off-by: Patrick McHardy --- Reading git-diff-tree failed