Re: [PATCH] conntrack-mms / keep hook private.

[Patrick McHardy <kaber@trash.net>]

[-- Attachment #1: Type: text/plain, Size: 280 bytes --]

Pawel Sikora wrote:
> Hi All,
> 
> IMHO the hook should be a private part of a kernel
> (similar to other conntrack modules).
> Attached patch hide the mms hook from userland.

I agree, but in fact nothing of the entire file should be
visible, so I've applied this patch instead.

[-- Attachment #2: x --]
[-- Type: text/plain, Size: 743 bytes --]

Index: linux-2.6.11/include/linux/netfilter_ipv4/ip_conntrack_mms.h
===================================================================
--- linux-2.6.11/include/linux/netfilter_ipv4/ip_conntrack_mms.h	(Revision 3890)
+++ linux-2.6.11/include/linux/netfilter_ipv4/ip_conntrack_mms.h	(Arbeitskopie)
@@ -15,7 +15,6 @@
 #define MMS_SRV_CHUNKLENLV_OFFSET        16
 #define MMS_SRV_CHUNKLENLM_OFFSET        32
 #define MMS_SRV_MESSAGELENGTH_OFFSET     8
-#endif
 
 /* This structure is per expected connection */
 struct ip_ct_mms_expect {
@@ -34,5 +33,5 @@
 				       enum ip_conntrack_info ctinfo,
 				       const struct ip_ct_mms_expect *exp_mms_info,
 				       struct ip_conntrack_expect *exp);
-
+#endif
 #endif /* _IP_CONNTRACK_MMS_H */