[PATCH] connmark requires ip_conntrack

[Pablo Neira <pablo@eurodev.net>]

[-- Attachment #1: Type: text/plain, Size: 231 bytes --]

Hi Patrick,

The connmark match/target require ip_conntrack to work. This patch add 
such dependency via need_ip_conntrack(). Thanks to Piotr Chytla for 
spotting this problem.

Signed-off-by: Pablo Neira Ayuso <pablo@eurodev.net>

[-- Attachment #2: x --]
[-- Type: text/plain, Size: 727 bytes --]

diff --git a/net/ipv4/netfilter/ipt_CONNMARK.c b/net/ipv4/netfilter/ipt_CONNMARK.c
index 1346380..05d66ab 100644
--- a/net/ipv4/netfilter/ipt_CONNMARK.c
+++ b/net/ipv4/netfilter/ipt_CONNMARK.c
@@ -109,6 +109,7 @@ static struct ipt_target ipt_connmark_re
 
 static int __init init(void)
 {
+	need_ip_conntrack();
 	return ipt_register_target(&ipt_connmark_reg);
 }
 
diff --git a/net/ipv4/netfilter/ipt_connmark.c b/net/ipv4/netfilter/ipt_connmark.c
index bf8de47..d99cf71 100644
--- a/net/ipv4/netfilter/ipt_connmark.c
+++ b/net/ipv4/netfilter/ipt_connmark.c
@@ -76,6 +76,7 @@ static struct ipt_match connmark_match =
 
 static int __init init(void)
 {
+	need_ip_conntrack();
 	return ipt_register_match(&connmark_match);
 }