From: Yasuyuki Kozakai Date: Wed, 15 Feb 2006 23:23:28 +0000 (-0800) Subject: [NETFILTER]: nf_conntrack: attach conntrack to TCP RST generated by ip6t_REJECT X-Git-Tag: v2.6.16-rc4~44^2~2 X-Git-Url: http://pilppa.com/gitweb/?a=commitdiff_plain;h=08857fa745ab6ce46601960d2774490e1cef2cff;p=linux-2.6-omap-h63xx.git [NETFILTER]: nf_conntrack: attach conntrack to TCP RST generated by ip6t_REJECT TCP RSTs generated by the REJECT target should be associated with the conntrack of the original TCP packet. Since the conntrack entry is usually not is the hash tables, it must be manually attached. Signed-off-by: Yasuyuki Kozakai Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller --- diff --git a/net/ipv6/netfilter/ip6t_REJECT.c b/net/ipv6/netfilter/ip6t_REJECT.c index c745717b4ce..0e6d1d4bbd5 100644 --- a/net/ipv6/netfilter/ip6t_REJECT.c +++ b/net/ipv6/netfilter/ip6t_REJECT.c @@ -160,6 +160,8 @@ static void send_reset(struct sk_buff *oldskb) csum_partial((char *)tcph, sizeof(struct tcphdr), 0)); + nf_ct_attach(nskb, oldskb); + NF_HOOK(PF_INET6, NF_IP6_LOCAL_OUT, nskb, NULL, nskb->dst->dev, dst_output); }