Pablo Neira Ayuso wrote:
Jan Engelhardt wrote:
parent b58602a4bac012b5f4fc12fe6b46ab237b610d5d
commit 7634e5f586394eafc85973712ff11e60a9ae2f70
Author: Jan Engelhardt <jengelh@xxxxxxxxxx>
Date: Thu Jan 8 09:20:03 2009 +0100
netfilter: ct_extend: alloc space for xt_portscan
The out-of-tree xt_portscan module currently (ab)uses skb->mark and
nfct->mark to store its state, but such may collide with
user-specified marks.
Using nfct_extend alleviates that problem and hopefully paves way
for inclusion of the module.
Sorry, I would not reserve an entry unless I know what xt_portscan is.
I feel the same way. And I would like to know why it needs
connection state. That seems counterintuitive to a portscan
detector, which is by definition trying to detect something
happening in multiple connections.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
