git://ftp.safe.ca / safe / jmp / linux-2.6 / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: ed77de9) | patch
[NETFILTER]: stop tracking ICMP error at early point
authorYasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp>
Wed, 9 Nov 2005 21:02:45 +0000 (13:02 -0800)
committerDavid S. Miller <davem@davemloft.net>
Wed, 9 Nov 2005 21:02:45 +0000 (13:02 -0800)
commitd63a92810807e8da298895236f2b99697e884014
treed687ea375c969fb220cc6fbb82b28ae51524b07btree | snapshot
parented77de9fc69076e6e7c85edf7c1b70650f53121acommit | diff
[NETFILTER]: stop tracking ICMP error at early point

Currently connection tracking handles ICMP error like normal packets
if it failed to get related connection. But it fails that after all.

This makes connection tracking stop tracking ICMP error at early point.

Signed-off-by: Yasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp>
Signed-off-by: Harald Welte <laforge@netfilter.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/netfilter/ip_conntrack_proto_icmp.c diff | blob | history
Full containers within linux kernel