]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_ct_ftp: add sequence tracking pickup facility for injected entries
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 21 Sep 2012 14:52:08 +0000 (16:52 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 24 Sep 2012 12:29:40 +0000 (14:29 +0200)
commitcfc72db1974b5a1f11f9e18e917ac545565350a2
treeda27254d7fe7dd96555668d5369a0e2dcc9bc769
parenta0d70f19fb9ec016e2b87c81e06fd9d72c653b0c
netfilter: nf_ct_ftp: add sequence tracking pickup facility for injected entries

This patch allows the FTP helper to pickup the sequence tracking from
the first packet seen. This is useful to fix the breakage of the first
FTP command after the failover while using conntrackd to synchronize
states.

The seq_aft_nl_num field in struct nf_ct_ftp_info has been shrinked to
16-bits (enough for what it does), so we can use the remaining 16-bits
to store the flags while using the same size for the private FTP helper
data.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/linux/netfilter/nf_conntrack_ftp.h
net/netfilter/nf_conntrack_ftp.c
net/netfilter/nf_conntrack_netlink.c
net/netfilter/nfnetlink_cthelper.c