Files
ack-tegra/include/linux
Patrick McHardy 124dff01af netfilter: don't reset nf_trace in nf_reset()
Commit 130549fe ("netfilter: reset nf_trace in nf_reset") added code
to reset nf_trace in nf_reset(). This is wrong and unnecessary.

nf_reset() is used in the following cases:

- when passing packets up the the socket layer, at which point we want to
  release all netfilter references that might keep modules pinned while
  the packet is queued. nf_trace doesn't matter anymore at this point.

- when encapsulating or decapsulating IPsec packets. We want to continue
  tracing these packets after IPsec processing.

- when passing packets through virtual network devices. Only devices on
  that encapsulate in IPv4/v6 matter since otherwise nf_trace is not
  used anymore. Its not entirely clear whether those packets should
  be traced after that, however we've always done that.

- when passing packets through virtual network devices that make the
  packet cross network namespace boundaries. This is the only cases
  where we clearly want to reset nf_trace and is also what the
  original patch intended to fix.

Add a new function nf_reset_trace() and use it in dev_forward_skb() to
fix this properly.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2013-04-05 15:38:10 -04:00
..
2013-03-01 13:39:00 -08:00
2013-03-19 19:15:52 +01:00
2013-02-26 02:46:08 -05:00
2013-01-24 09:04:04 +01:00
2013-02-22 23:31:31 -05:00
2013-01-25 21:03:54 -08:00
2013-02-06 15:59:47 -05:00
2013-01-29 13:59:57 -05:00
2013-01-10 11:44:38 -06:00
2013-01-29 19:32:58 -08:00
2013-03-22 16:41:20 -07:00
2013-01-21 17:18:20 +10:30
2013-01-24 15:37:26 +01:00
2013-01-23 13:44:00 -05:00
2013-02-19 08:43:34 +01:00
2013-03-19 19:15:52 +01:00
2013-02-10 19:41:08 -05:00
2013-02-14 09:21:15 -05:00
2013-01-15 22:43:15 -08:00
2013-03-20 12:10:38 -04:00
2013-02-08 18:28:04 +01:00
2013-01-25 15:06:01 -08:00