From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: Thu, 22 Mar 2012 23:02:07 +0000 (+0100)
Subject: netfilter: xt_CT: fix assignation of the generic protocol tracker
X-Git-Tag: v3.4-rc1~84^2~8^2~1
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=eeb4cb952386aac764a5cf4cf2490e50a24a8880;p=pandora-kernel.git

netfilter: xt_CT: fix assignation of the generic protocol tracker

`iptables -p all' uses 0 to match all protocols, while the conntrack
subsystem uses 255. We still need `-p all' to attach the custom
timeout policies for the generic protocol tracker.

Moreover, we may use `iptables -p sctp' while the SCTP tracker is
not loaded. In that case, we have to default on the generic protocol
tracker.

Another possibility is `iptables -p ip' that should be supported
as well. This patch makes sure we validate all possible scenarios.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

Reading git-diff-tree failed