netfilter: conntrack: fix dropping packet after l4proto->packet()

Browse source

We currently use the negative value in the conntrack code to encode
the packet verdict in the error. As NF_DROP is equal to 0, inverting
NF_DROP makes no sense and, as a result, no packets are ever dropped.

Signed-off-by: Christoph Paasch <christoph.paasch@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>

...

This commit is contained in:

Christoph Paasch 2009-03-16 15:51:29 +01:00 • committed by Patrick McHardy

parent 626ba8fbac

commit ec8d540969

2 changed files with 3 additions and 3 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

net/netfilter/nf_conntrack_core.c

View file

4

net/netfilter/nf_conntrack_proto_tcp.c

View file