conntrack-tools branch, master, updated. conntrack-tools-0.9.14-21-gf29be5e

Pablo Neira netfilter-cvslog-bounces at lists.netfilter.org
Thu Jul 1 15:18:15 CEST 2010


This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "conntrack-tools".

The branch, master has been updated
       via  f29be5ece1f9a0381afc9d58027b0bc4509ba479 (commit)
      from  dfbc66f375e1945e7f65a0478cd25f851efae355 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit f29be5ece1f9a0381afc9d58027b0bc4509ba479
Author: Pablo Neira Ayuso <pablo at netfilter.org>
Date:   Thu Jul 1 15:11:47 2010 +0200

    conntrack: fix bogus NATted flows in filtering
    
    With this patch, conntrack does not show bogus entries that have no NAT
    applied due to a relaxed checking.
    
    conntrack -L --src-nat :80
    tcp      6 342824 ESTABLISHED src=XX.214.188.80 dst=66.XX.7.180 sport=80 dport=13749 packets=4 bytes=6000 [UNREPLIED] src=66.XX.7.180 dst=XX.214.188.80 sport=13749 dport=80 packets=0 bytes=0 mark=0 secmark=0 use=1
    conntrack v0.9.14 (conntrack-tools): 1 flow entries have been shown.
    
    Signed-off-by: Pablo Neira Ayuso <pablo at netfilter.org>

-----------------------------------------------------------------------

Summary of changes:
 src/conntrack.c |   12 ++++++++----
 1 files changed, 8 insertions(+), 4 deletions(-)


hooks/post-receive
-- 
conntrack-tools



More information about the netfilter-cvslog mailing list