Jan Engelhardt wrote: > parent b58602a4bac012b5f4fc12fe6b46ab237b610d5d > commit 7634e5f586394eafc85973712ff11e60a9ae2f70 > Author: Jan Engelhardt <jengelh@xxxxxxxxxx> > Date: Thu Jan 8 09:20:03 2009 +0100 > > netfilter: ct_extend: alloc space for xt_portscan > > The out-of-tree xt_portscan module currently (ab)uses skb->mark and > nfct->mark to store its state, but such may collide with > user-specified marks. > > Using nfct_extend alleviates that problem and hopefully paves way > for inclusion of the module. > > Signed-off-by: Jan Engelhardt <jengelh@xxxxxxxxxx> > --- > include/net/netfilter/nf_conntrack_extend.h | 1 + > 1 files changed, 1 insertions(+), 0 deletions(-) > > diff --git a/include/net/netfilter/nf_conntrack_extend.h b/include/net/netfilter/nf_conntrack_extend.h > index da8ee52..389794a 100644 > --- a/include/net/netfilter/nf_conntrack_extend.h > +++ b/include/net/netfilter/nf_conntrack_extend.h > @@ -8,6 +8,7 @@ enum nf_ct_ext_id > NF_CT_EXT_HELPER, > NF_CT_EXT_NAT, > NF_CT_EXT_ACCT, > + NF_CT_EXT_PORTSCAN, /* xt_portscan state */ > NF_CT_EXT_NUM, > }; Sorry, I would not reserve an entry unless I know what xt_portscan is. -- "Los honestos son inadaptados sociales" -- Les Luthiers -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html