From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: [NETFILTER 03/05]: nf_conntrack: attach conntrack to TCP RST generated by ip6t_REJECT Date: Thu, 16 Feb 2006 00:38:34 +0100 Message-ID: <43F3BB7A.9060102@trash.net> References: <20060215230026.25078.33875.sendpatchset@localhost.localdomain> <20060215230031.25078.75252.sendpatchset@localhost.localdomain> <20060215.152348.114993796.davem@davemloft.net> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: netfilter-devel@lists.netfilter.org Return-path: To: "David S. Miller" In-Reply-To: <20060215.152348.114993796.davem@davemloft.net> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-devel-bounces@lists.netfilter.org Errors-To: netfilter-devel-bounces@lists.netfilter.org List-Id: netfilter-devel.vger.kernel.org David S. Miller wrote: > From: Patrick McHardy > Date: Thu, 16 Feb 2006 00:00:31 +0100 (MET) > > >>[NETFILTER]: nf_conntrack: attach conntrack to TCP RST generated by ip6t_REJECT >> >>TCP RSTs generated by the REJECT target should be associated with the >>conntrack of the original TCP packet. Since the conntrack entry is >>usually not is the hash tables, it must be manually attached. >> > > Applied. > > Does the ipv4 REJECT target do this too? > Yes, IPv4 does the same for both TCP RSTs and ICMP errors.