[PATCH][RESEND]: clear nf_debug in for ipsec-tunneled packets

[PATCH][RESEND]: clear nf_debug in for ipsec-tunneled packets

[Patrick McHardy]

[-- Attachment #1: Type: text/plain, Size: 183 bytes --]

This patch for 2.6 clears nf_debug in ip_local_deliver_finish so
the "hook ... already set" messages in nf_hook_slow won't get
triggered for ipsec-tunneled packets.

Regards,
Patrick

[-- Attachment #2: pom-2.6-tunnel-debug.diff --]
[-- Type: text/plain, Size: 1317 bytes --]

diff -urN a/patch-o-matic_2.5/pending/27-ipsec_tunnel-nf_debug.diff b/patch-o-matic_2.5/pending/27-ipsec_tunnel-nf_debug.diff
--- a/patch-o-matic_2.5/pending/27-ipsec_tunnel-nf_debug.diff	1970-01-01 01:00:00.000000000 +0100
+++ b/patch-o-matic_2.5/pending/27-ipsec_tunnel-nf_debug.diff	2003-08-24 23:17:43.000000000 +0200
@@ -0,0 +1,11 @@
+===== net/ipv4/ip_input.c 1.17 vs edited =====
+--- 1.17/net/ipv4/ip_input.c	Mon Jun 16 17:11:36 2003
++++ edited/net/ipv4/ip_input.c	Sun Aug 24 23:11:36 2003
+@@ -201,6 +201,7 @@
+ 
+ #ifdef CONFIG_NETFILTER_DEBUG
+ 	nf_debug_ip_local_deliver(skb);
++	skb->nf_debug = 0;
+ #endif /*CONFIG_NETFILTER_DEBUG*/
+ 
+ 	__skb_pull(skb, ihl);
diff -urN a/patch-o-matic_2.5/pending/27-ipsec_tunnel-nf_debug.diff.help b/patch-o-matic_2.5/pending/27-ipsec_tunnel-nf_debug.diff.help
--- a/patch-o-matic_2.5/pending/27-ipsec_tunnel-nf_debug.diff.help	1970-01-01 01:00:00.000000000 +0100
+++ b/patch-o-matic_2.5/pending/27-ipsec_tunnel-nf_debug.diff.help	2003-08-24 23:34:23.000000000 +0200
@@ -0,0 +1,7 @@
+Author: Patrick McHardy <kaber@trash.net>
+Status: Working
+
+This patch clears nf_debug in ip_local_deliver_finish so the
+"hook ... already set" message in nf_hook_slow won't get triggered for
+decapsulated ipsec-tunnel packets when passing them through the network
+stack again.

Re: [PATCH][RESEND]: clear nf_debug in for ipsec-tunneled packets

[Harald Welte]

[-- Attachment #1: Type: text/plain, Size: 687 bytes --]

On Wed, Sep 03, 2003 at 01:07:37PM +0200, Patrick McHardy wrote:
> This patch for 2.6 clears nf_debug in ip_local_deliver_finish so
> the "hook ... already set" messages in nf_hook_slow won't get
> triggered for ipsec-tunneled packets.

thanks, I'll push it to davem in my next email.

> Regards,
> Patrick
-- 
- Harald Welte <laforge@netfilter.org>             http://www.netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie

[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]