[NETFILTER]: Keep conntrack reference until IPsec policy checks are done

Browse source

Keep the conntrack reference until policy checks have been performed for
IPsec NAT support. The reference needs to be dropped before a packet is
queued to avoid having the conntrack module unloadable.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

...

This commit is contained in:

Patrick McHardy 2006-01-06 23:06:10 -08:00 • committed by David S. Miller

parent 5c901daaea

commit b59c270104

6 changed files with 12 additions and 9 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1

net/dccp/ipv4.c

View file

15

net/ipv4/ip_input.c

View file

1

net/ipv4/raw.c

View file

1

net/ipv4/tcp_ipv4.c

View file

2

net/ipv4/udp.c

View file

1

net/sctp/input.c

View file