From: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
To: Davide Caratti <dcaratti@redhat.com>
Cc: Pablo Neira Ayuso <pablo@netfilter.org>,
Patrick McHardy <kaber@trash.net>,
Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>,
"David S . Miller" <davem@davemloft.net>,
netfilter-devel@vger.kernel.org, coreteam@netfilter.org
Subject: Re: [PATCH nf-next 1/2] netfilter: select LIBCRC32C together with SCTP conntrack
Date: Mon, 2 Jan 2017 17:10:51 -0200 [thread overview]
Message-ID: <20170102191051.GA23871@localhost.localdomain> (raw)
In-Reply-To: <c4b47e21dcfae883d63dd1c43537346ee3bfa89d.1483355460.git.dcaratti@redhat.com>
On Mon, Jan 02, 2017 at 01:29:40PM +0100, Davide Caratti wrote:
> nf_conntrack needs to compute crc32c when dealing with SCTP packets.
> Moreover, NF_NAT_PROTO_SCTP (currently selecting LIBCRC32C) can be enabled
> only if conntrack support for SCTP is enabled. Therefore, move enabling of
> kernel support for crc32c so that it is selected when NF_CT_PROTO_SCTP=y.
>
> Signed-off-by: Davide Caratti <dcaratti@redhat.com>
Reviewed-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
> ---
> net/netfilter/Kconfig | 2 +-
> 1 file changed, 1 insertion(+), 1 deletion(-)
>
> diff --git a/net/netfilter/Kconfig b/net/netfilter/Kconfig
> index 63729b4..6d425e3 100644
> --- a/net/netfilter/Kconfig
> +++ b/net/netfilter/Kconfig
> @@ -162,6 +162,7 @@ config NF_CT_PROTO_SCTP
> bool 'SCTP protocol connection tracking support'
> depends on NETFILTER_ADVANCED
> default y
> + select LIBCRC32C
> help
> With this option enabled, the layer 3 independent connection
> tracking code will be able to do state tracking on SCTP connections.
> @@ -397,7 +398,6 @@ config NF_NAT_PROTO_SCTP
> bool
> default NF_NAT && NF_CT_PROTO_SCTP
> depends on NF_NAT && NF_CT_PROTO_SCTP
> - select LIBCRC32C
>
> config NF_NAT_AMANDA
> tristate
> --
> 2.7.4
>
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at http://vger.kernel.org/majordomo-info.html
>
next prev parent reply other threads:[~2017-01-02 19:10 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-01-02 12:29 [PATCH nf-next 0/2] nf_conntrack: validate crc32c on SCTP packets hitting PREROUTING hook Davide Caratti
2017-01-02 12:29 ` [PATCH nf-next 1/2] netfilter: select LIBCRC32C together with SCTP conntrack Davide Caratti
2017-01-02 19:10 ` Marcelo Ricardo Leitner [this message]
2017-01-02 12:29 ` [PATCH nf-next 2/2] netfilter: conntrack: validate SCTP crc32c in PREROUTING Davide Caratti
2017-01-05 12:25 ` [PATCH nf-next 0/2] nf_conntrack: validate crc32c on SCTP packets hitting PREROUTING hook Pablo Neira Ayuso
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20170102191051.GA23871@localhost.localdomain \
--to=marcelo.leitner@gmail.com \
--cc=coreteam@netfilter.org \
--cc=davem@davemloft.net \
--cc=dcaratti@redhat.com \
--cc=kaber@trash.net \
--cc=kadlec@blackhole.kfki.hu \
--cc=netfilter-devel@vger.kernel.org \
--cc=pablo@netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.