[PATCH 1/5] [CTNETLINK] Fix expectation mask dumping
Pablo Neira Ayuso
pablo at netfilter.org
Mon Feb 27 19:50:06 CET 2006
Yasuyuki KOZAKAI wrote:
> From: Pablo Neira Ayuso <pablo at netfilter.org>
> Date: Mon, 27 Feb 2006 03:10:18 +0100
>>This patch introduces the function ctnetlink_exp_dump_mask, that
>>correctly dumps the expectation mask. Such function uses the l3num value
>>from the expectation tuple that is a valid layer 3 protocol number.
>>The value of the l3num mask isn't dumped since it is meaningless from
>>the userspace side.
> At first, this patch seems to be for net-2.6.17. This fix isn't really
> necessary to 2.6.16 ?
Yes, it's necessary.
> I've noticed missing nesting with CTA_EXP_MASK in this function. Please
> apply the attached patch on top of your patch. I tested it with ftp helper,
> ftp server, and telnet with IPv6. And I saw that kernel filled expectation
> mask in CTA_EXP_MASK area.
Thanks a lot Yasuyuki. Annoying that I forgot about this. I'm going to
resend a patch in some hours.
The dawn of the fourth age of Linux firewalling is coming; a time of
great struggle and heroic deeds -- J.Kadlecsik got inspired by J.Morris
More information about the netfilter-devel