Commit 43ee0061 authored by Harald Welte's avatar Harald Welte Committed by David S. Miller

[NETFILTER]: Trivial but important state fix for ipt_conntrack.

parent 21e9cc0e
...@@ -27,7 +27,11 @@ match(const struct sk_buff *skb, ...@@ -27,7 +27,11 @@ match(const struct sk_buff *skb,
#define FWINV(bool,invflg) ((bool) ^ !!(sinfo->invflags & invflg)) #define FWINV(bool,invflg) ((bool) ^ !!(sinfo->invflags & invflg))
statebit = ct ? IPT_CONNTRACK_STATE_INVALID : IPT_CONNTRACK_STATE_BIT(ctinfo); if (ct)
statebit = IPT_CONNTRACK_STATE_BIT(ctinfo);
else
statebit = IPT_CONNTRACK_STATE_INVALID;
if(sinfo->flags & IPT_CONNTRACK_STATE) { if(sinfo->flags & IPT_CONNTRACK_STATE) {
if (ct) { if (ct) {
if(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.ip != if(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.ip !=
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment