Messages in this thread |  | | | Subject | Re: 2.6.12: connection tracking broken? | | From | Bart De Schuymer <> | | Date | Tue, 21 Jun 2005 20:46:12 +0000 |
| |
Op di, 21-06-2005 te 17:16 +0200, schreef Patrick McHardy: > I unfortunately don't see a way to remove it, but we should keep > thinking about it. Can you please check if the attached patch is > correct? It should exclude all packets handled by bridge-netfilter > from having their conntrack reference dropped. I didn't add nf_reset()'s > to the bridging code because with tc actions the packets can end up > anywhere else anyway, and this will hopefully get fixed right sometime.
Looks good. Perhaps a compile time option to disable postponing the hooks would be nice...
> BTW. this line from ip_sabotage_out() looks wrong, it will clear all > flags instead of setting the BRNF_DONT_TAKE_PARENT flag (second > patch): > > nf_bridge->mask &= BRNF_DONT_TAKE_PARENT;
Thanks, Bart
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|  |