[PATCH] Apply userspace filter on resync with internal cache disabled

[Robin Geuze <robing@xxxxxxxxxx>]

Always apply the userspace filter when doing a direct sync from the kernel when internal cache is disabled, since a dump does not apply a kernelspace filter.

Signed-off-by: Robin Geuze <robing@xxxxxxxxxx>
---
 src/sync-notrack.c | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/sync-notrack.c b/src/sync-notrack.c
index 1b53e1b..b765c1a 100644
--- a/src/sync-notrack.c
+++ b/src/sync-notrack.c
@@ -72,6 +72,9 @@ static int kernel_resync_cb(enum nf_conntrack_msg_type type,
 {
 	struct nethdr *net;
 
+	if (ct_filter_conntrack(ct, 1))
+		return NFCT_CB_CONTINUE;
+
 	net = BUILD_NETMSG_FROM_CT(ct, NET_T_STATE_CT_NEW);
 	multichannel_send(STATE_SYNC(channel), net);
 
-- 
2.20.1