Pārlūkot izejas kodu

[NETFILTER]: Fix handling of ICMP packets (RELATED) in ipt_CLUSTERIP target.

Signed-off-by: Harald Welte <laforge@netfilter.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
Harald Welte 20 gadi atpakaļ
vecāks
revīzija
5d927eb010
1 mainītis faili ar 1 papildinājumiem un 1 dzēšanām
  1. 1 1
      net/ipv4/netfilter/ipt_CLUSTERIP.c

+ 1 - 1
net/ipv4/netfilter/ipt_CLUSTERIP.c

@@ -339,7 +339,7 @@ target(struct sk_buff **pskb,
 	 * error messages (RELATED) and information requests (see below) */
 	if ((*pskb)->nh.iph->protocol == IPPROTO_ICMP
 	    && (ctinfo == IP_CT_RELATED 
-		|| ctinfo == IP_CT_IS_REPLY+IP_CT_IS_REPLY))
+		|| ctinfo == IP_CT_RELATED+IP_CT_IS_REPLY))
 		return IPT_CONTINUE;
 
 	/* ip_conntrack_icmp guarantees us that we only have ICMP_ECHO,