Re: [PATCH] netfilter: synproxy: fix conntrackd interaction

[Eric Leblond <eric@regit.org>]

Hi,

On Mon, 2017-05-15 at 19:55 +0200, Pablo Neira Ayuso wrote:
> On Mon, May 15, 2017 at 07:49:18PM +0200, Eric Leblond wrote:
> >    Hello,
> >    Le 15 mai 2017 6:52 PM, Pablo Neira Ayuso <pablo@netfilter.org>
> > a
> >    écrit :
> > 
> >      On Thu, May 11, 2017 at 06:56:38PM +0200, Eric Leblond wrote:
> >      > This patch fixes the creation of connection tracking entry
> > from
> >      > netlink when synproxy is used. It was missing the addition
> > of
> >      > the synproxy extension.
> >      >
> >      > This was causing kernel crashes when a conntrack entry
> > created by
> >      > conntrackd was used after the switch of traffic from active
> > node
> >      > to the passive node.
> >      Applied, thanks Eric.
> > 
> >    Thanks Pablo !
> >    Will you push it to stable as it is causing a crash on older
> > kernel
> >    like 3.16?
> 
> Does this compile cleanly as is?

Yes, I have tested the patch on 3.16.1 and it applies cleanly. I've
build module for 4.1 and patch applies too. I did not test it but code
is unchanged.

> If so, I can just request -stable maintainer to take it as soon as
> this hits upstream.

Thanks!

BR,
-- 
Eric Leblond <eric@regit.org>