[xt_RAWNAT 1/3] Make room in the hook priority list

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



origin git://computergmbh.de/linux patchomatic
commit 03e306db0e3a74d9bca91191afbd955be6b7c632
Author: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>
Date:   Wed Jan 9 18:37:37 2008 +0100

    [NETFILTER]: Make room in the hook priority list
    
    A few hook priorites related to conntrack are currently assigned
    values at the end of the priority list, making it impossible to add
    priorities in-between or after these. Renumber NF_IP_PRI_* so that
    this becomes possible.
    
    Signed-off-by: Jan Engelhardt <jengelh@xxxxxxxxxxxxxxx>

diff --git a/include/linux/netfilter_ipv4.h b/include/linux/netfilter_ipv4.h
index 9a10092..7378d17 100644
--- a/include/linux/netfilter_ipv4.h
+++ b/include/linux/netfilter_ipv4.h
@@ -62,9 +62,9 @@ enum nf_ip_hook_priorities {
 	NF_IP_PRI_FILTER = 0,
 	NF_IP_PRI_NAT_SRC = 100,
 	NF_IP_PRI_SELINUX_LAST = 225,
-	NF_IP_PRI_CONNTRACK_HELPER = INT_MAX - 2,
-	NF_IP_PRI_NAT_SEQ_ADJUST = INT_MAX - 1,
-	NF_IP_PRI_CONNTRACK_CONFIRM = INT_MAX,
+	NF_IP_PRI_CONNTRACK_HELPER = 500,
+	NF_IP_PRI_NAT_SEQ_ADJUST = 520,
+	NF_IP_PRI_CONNTRACK_CONFIRM = 540,
 	NF_IP_PRI_LAST = INT_MAX,
 };
 
-
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux