HsiuWen Yen 33b690216e netfilter: fix checking method of conntrack helper ...

This patch uses nfct_help() to detect whether an established connection
needs conntrack helper instead of using test_bit(IPS_HELPER_BIT,
&ct->status).

The reason for this modification is that IPS_HELPER_BIT is only set when
the conntrack helper is attached by explicit CT target.

However, in the case that a device enables conntrack helper via the other
ways (e.g., command "echo 1 > /proc/sys/net/netfilter/nf_conntrack_helper")
, the status of IPS_HELPER_BIT will not present any change. That means the
IPS_HELPER_BIT might lose the checking ability in the context.

Signed-off-by: HsiuWen Yen <y.hsiuwen@gmail.com>

2019-02-09 14:37:26 +01:00

..

imagebuilder

imagebuilder: manifest function show stderr

2018-08-06 06:54:42 +02:00

linux

netfilter: fix checking method of conntrack helper

2019-02-09 14:37:26 +01:00

sdk

sdk: find kernel modules when KDIR is a symlink

2018-11-29 09:36:14 +01:00

toolchain

merge: etc: update remaining files

2017-12-08 19:41:18 +01:00

Config.in

build: add support for enabling the rootfs/boot partition size option via target feature

2018-09-03 12:06:24 +02:00

Makefile

build: make <subdir>/install opt-in, use it for target/ only

2017-02-09 13:51:35 +01:00