From: Patrick McHardy <kaber@trash.net>
Date: Sat, 7 Jan 2006 07:06:10 +0000 (-0800)
Subject: [NETFILTER]: Keep conntrack reference until IPsec policy checks are done
X-Git-Tag: v2.6.16-rc1~918
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b59c270104f03960069596722fea70340579244d;p=pandora-kernel.git

[NETFILTER]: Keep conntrack reference until IPsec policy checks are done

Keep the conntrack reference until policy checks have been performed for
IPsec NAT support. The reference needs to be dropped before a packet is
queued to avoid having the conntrack module unloadable.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
---

Reading git-diff-tree failed