===== net/ipv4/netfilter/ip_conntrack_core.c 1.62 vs edited ===== --- 1.62/net/ipv4/netfilter/ip_conntrack_core.c Mon Oct 4 01:23:58 2004 +++ edited/net/ipv4/netfilter/ip_conntrack_core.c Mon Oct 18 21:53:02 2004 @@ -490,13 +490,14 @@ add_timer(&ct->timeout); atomic_inc(&ct->ct_general.use); set_bit(IPS_CONFIRMED_BIT, &ct->status); - WRITE_UNLOCK(&ip_conntrack_lock); CONNTRACK_STAT_INC(insert); + WRITE_UNLOCK(&ip_conntrack_lock); return NF_ACCEPT; } - WRITE_UNLOCK(&ip_conntrack_lock); CONNTRACK_STAT_INC(insert_failed); + WRITE_UNLOCK(&ip_conntrack_lock); + return NF_DROP; }