git.openpandora.org / pandora-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 626ba8f) | patch
netfilter: conntrack: fix dropping packet after l4proto->packet()
authorChristoph Paasch <christoph.paasch@gmail.com>
Mon, 16 Mar 2009 14:51:29 +0000 (15:51 +0100)
committerPatrick McHardy <kaber@trash.net>
Mon, 16 Mar 2009 14:51:29 +0000 (15:51 +0100)
commitec8d540969da9a70790e9028d57b5b577dd7aa77
tree375d23d65f3288776de1585cccae5270b90a56aftree | snapshot
parent626ba8fbac9156a94a80be46ffd2f2ce9e4e89a0commit | diff
netfilter: conntrack: fix dropping packet after l4proto->packet()

We currently use the negative value in the conntrack code to encode
the packet verdict in the error. As NF_DROP is equal to 0, inverting
NF_DROP makes no sense and, as a result, no packets are ever dropped.

Signed-off-by: Christoph Paasch <christoph.paasch@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
net/netfilter/nf_conntrack_core.c diff | blob | history
net/netfilter/nf_conntrack_proto_tcp.c diff | blob | history
Pandora Kernel Repository