| commit | e59ea3df3fc290b91c52a250c19091c18b4e6d7e | [log] [tgz] |
|---|---|---|
| author | Florian Westphal <fw@strlen.de> | Fri Nov 14 13:21:48 2014 +0100 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Mon Nov 17 12:44:20 2014 +0100 |
| tree | 20e3e6a02a4168c7af67285c96b369bdf31d1722 | |
| parent | 8225161545a67bdb68cf86beafcdce1604720605 [diff] |
netfilter: xt_connlimit: honor conntrack zone if available Currently all the conntrack lookups are done using default zone. In case the skb has a ct attached (e.g. template) we should use this zone for lookups instead. This makes connlimit work with connections assigned to other zones. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>