Re: [PATCH nf] netfilter: nft_ct: Remove confirmation check for NFT_CT_ID

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Brett Mastbergen <brett.mastbergen@xxxxxxxxx> wrote:
> Since commit 656c8e9cc1ba ("netfilter: conntrack: Use consistent ct id
> hash calculation") the ct id will not change from initialization to
> confirmation.  Removing the confirmation check allows for things like
> adding an element to a 'typeof ct id' set in prerouting upon reception
> of the first packet of a new connection, and then being able to
> reference that set consistently both before and after the connection
> is confirmed.

Acked-by: Florian Westphal <fw@xxxxxxxxx>



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux