| commit | 8430eac2f6a3c2adce22d490e2ab8bb50d59077a | [log] [tgz] |
|---|---|---|
| author | Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | Mon Apr 09 16:32:16 2012 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Tue Apr 10 00:38:34 2012 +0200 |
| tree | 0513c19811d4a34a122155351ee5728572ddadaf | |
| parent | 95ad2f873d5d404dc9ebc2377de0b762346346c0 [diff] |
netfilter: nf_ct_ipv4: handle invalid IPv4 and IPv6 packets consistently IPv6 conntrack marked invalid packets as INVALID and let the user drop those by an explicit rule, while IPv4 conntrack dropped such packets itself. IPv4 conntrack is changed so that it marks INVALID packets and let the user to drop them. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>