| commit | ec8d540969da9a70790e9028d57b5b577dd7aa77 | [log] [tgz] |
|---|---|---|
| author | Christoph Paasch <christoph.paasch@gmail.com> | Mon Mar 16 15:51:29 2009 +0100 |
| committer | Patrick McHardy <kaber@trash.net> | Mon Mar 16 15:51:29 2009 +0100 |
| tree | 375d23d65f3288776de1585cccae5270b90a56af | |
| parent | 626ba8fbac9156a94a80be46ffd2f2ce9e4e89a0 [diff] |
netfilter: conntrack: fix dropping packet after l4proto->packet() We currently use the negative value in the conntrack code to encode the packet verdict in the error. As NF_DROP is equal to 0, inverting NF_DROP makes no sense and, as a result, no packets are ever dropped. Signed-off-by: Christoph Paasch <christoph.paasch@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Patrick McHardy <kaber@trash.net>