OSDN Git Service

netfilter: synproxy: fix conntrackd interaction
authorEric Leblond <eric@regit.org>
Thu, 11 May 2017 16:56:38 +0000 (18:56 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 5 Jul 2017 12:37:15 +0000 (14:37 +0200)
commite052be55a598eed299af2ec01a8835696bdd64c8
tree3c6e23769b7b35d6aa4157b7cbc22a877f4d927c
parent234e649840d191379cd132d89f4b01a2495cfcc3
netfilter: synproxy: fix conntrackd interaction

commit 87e94dbc210a720a34be5c1174faee5c84be963e upstream.

This patch fixes the creation of connection tracking entry from
netlink when synproxy is used. It was missing the addition of
the synproxy extension.

This was causing kernel crashes when a conntrack entry created by
conntrackd was used after the switch of traffic from active node
to the passive node.

Signed-off-by: Eric Leblond <eric@regit.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nf_conntrack_netlink.c