On Wed, Dec 14, 2016 at 04:35:57PM -0500, joseph.j.conley@xxxxxxxxx wrote: > From: Joe Conley <joe.conley@xxxxxxxxxxxxx> > > Two missing ifdef checks for CONFIG_NF_CONNTRACK_MARK were causing > EOPNOTSUPP to be returned. Every single place that cda[CTA_MARK] or cda[CTA_MARK_MASK] > was checked was inside a #ifdef for CONFIG_NF_CONNTRACK_MARK except for these > two places. The reason for this change stems from this commit: > 866476f323465a8afef10b14b48d5136bf5c51fe (netfilter: conntrack: Flush connections with a given mark) > > This allows conntrack -L to be ran succesfully when CONFIG_NF_CONNTRACK_MARK > is not enabled. I would like to understand how you're triggering this problem. If it is a plain 'conntrack -L' command line invocation that triggers the problem, then it's probably a userspace problem since we should not send any mark attribute to the kernel if not set. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
