Jan Engelhardt wrote:
> diff --git a/net/ipv4/netfilter/iptable_raw.c b/net/ipv4/netfilter/iptable_raw.c
> index 766c6fd..2367953 100644
> --- a/net/ipv4/netfilter/iptable_raw.c
> +++ b/net/ipv4/netfilter/iptable_raw.c
> @@ -41,6 +41,7 @@ static const struct xt_table packet_raw = {
> .valid_hooks = RAW_VALID_HOOKS,
> .me = THIS_MODULE,
> .af = NFPROTO_IPV4,
> + .priority = NF_IP_PRI_FIRST,
You're changing priorities here, NF_IP_PRI_RAW is not NF_IP_PRI_FIRST.
> };
>
> /* The work comes in here from netfilter.c. */
> @@ -62,23 +63,7 @@ iptable_raw_hook(unsigned int hook,
> return ipt_do_table(skb, hook, in, out, net->ipv4.iptable_raw);
> }
>
> -/* 'raw' is the very first table. */
> -static struct nf_hook_ops ipt_ops[] __read_mostly = {
> - {
> - .hook = iptable_raw_hook,
> - .pf = NFPROTO_IPV4,
> - .hooknum = NF_INET_PRE_ROUTING,
> - .priority = NF_IP_PRI_RAW,
> - .owner = THIS_MODULE,
> - },
> - {
> - .hook = iptable_raw_hook,
> - .pf = NFPROTO_IPV4,
> - .hooknum = NF_INET_LOCAL_OUT,
> - .priority = NF_IP_PRI_RAW,
> - .owner = THIS_MODULE,
> - },
> -};
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
