2003-07-25 20:44:25

by Harald Welte

[permalink] [raw]
Subject: Update: [PATCH 2.6] iptables MIRROR target fixes

Hi again, Dave!

On Sat, Jul 19, 2003 at 04:26:48PM +0200, Harald Welte wrote:

> This is the first of my 2.6 merge of the recent bugfixes (all tested
> against 2.6.0-test1). You might need to apply them incrementally
> (didn't test it in a different order).

Unfortunately I introduced a typo during the merge (which in turn
introduced a new bug).

Please incrementially apply the following patch, thanks.


--- linux-2.6.0-test1-nftest5/net/ipv4/netfilter/ipt_MIRROR.c 2003-07-19 16:13:56.000000000 +0200
+++ linux-2.6.0-test1-nftest6/net/ipv4/netfilter/ipt_MIRROR.c 2003-07-19 17:35:23.000000000 +0200
@@ -173,7 +173,7 @@
/* Don't let conntrack code see this packet:
* it will think we are starting a new
* connection! --RR */
- ip_direct_send(*pskb);
+ ip_direct_send(nskb);

return NF_DROP;
}

[now really off for OLS].

--
- Harald Welte <[email protected]> http://www.netfilter.org/
============================================================================
"Fragmentation is like classful addressing -- an interesting early
architectural error that shows how much experimentation was going
on while IP was being designed." -- Paul Vixie


Attachments:
(No filename) (1.18 kB)
(No filename) (189.00 B)
Download all attachments

2003-07-25 22:09:55

by David Miller

[permalink] [raw]
Subject: Re: Update: [PATCH 2.6] iptables MIRROR target fixes

On Fri, 25 Jul 2003 22:52:42 +0200
Harald Welte <[email protected]> wrote:

> On Sat, Jul 19, 2003 at 04:26:48PM +0200, Harald Welte wrote:
>
> > This is the first of my 2.6 merge of the recent bugfixes (all tested
> > against 2.6.0-test1). You might need to apply them incrementally
> > (didn't test it in a different order).
>
> Unfortunately I introduced a typo during the merge (which in turn
> introduced a new bug).
>
> Please incrementially apply the following patch, thanks.

All 2.6.x netfilter patches applied, thanks.