| commit | aa0c2c68abd1e2915656cc81afdb195bc8595dec | [log] [tgz] |
|---|---|---|
| author | Liping Zhang <liping.zhang@spreadtrum.com> | Mon Aug 08 22:10:26 2016 +0800 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Tue Aug 09 10:39:26 2016 +0200 |
| tree | 357b67f1a5a9e7339701af9b3dbce83f026c9f5a | |
| parent | 00a3101f561816e58de054a470484996f78eb5eb [diff] |
netfilter: ctnetlink: reject new conntrack request with different l4proto Currently, user can add a conntrack with different l4proto via nfnetlink. For example, original tuple is TCP while reply tuple is SCTP. This is invalid combination, we should report EINVAL to userspace. Signed-off-by: Liping Zhang <liping.zhang@spreadtrum.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>