From: Patrick McHardy <kaber@trash.net>
To: tim.gardner@canonical.com
Cc: Jan Engelhardt <jengelh@medozas.de>, netfilter-devel@vger.kernel.org
Subject: Re: [PATCH 2/3] netfilter: xt_connbytes: Force CT accounting to be enabled
Date: Fri, 25 Jun 2010 10:44:53 +0200 [thread overview]
Message-ID: <4C246C85.1040704@trash.net> (raw)
In-Reply-To: <4C23A8C1.2070506@canonical.com>
Tim Gardner wrote:
> On 06/24/2010 11:15 AM, Jan Engelhardt wrote:
>>
>> On Thursday 2010-06-24 17:27, Tim Gardner wrote:
>>> diff --git a/net/netfilter/xt_connbytes.c
>>> b/net/netfilter/xt_connbytes.c
>>> index 7351783..b0cda8c 100644
>>> --- a/net/netfilter/xt_connbytes.c
>>> +++ b/net/netfilter/xt_connbytes.c
>>> @@ -112,6 +112,16 @@ static int connbytes_mt_check(const struct
>>> xt_mtchk_param *par)
>>> if (ret< 0)
>>> pr_info("cannot load conntrack support for proto=%u\n",
>>> par->family);
>>> +
>>> + /*
>>> + * This filter cannot function correctly unless connection
>>> tracking
>>> + * accounting is enabled, so complain in the hope that someone
>>> notices.
>>> + */
>>> + if (nf_ct_acct_enabled(par) == false) {
>>
>> if (!nfct_acct_enabled(par)) {
>>
>>> + pr_warning("Forcing CT accounting to be enabled\n");
>>> + nf_ct_set_acct(par, true);
>>> + }
>>> +
>>> return ret;
>>> }
>> --
>
> meh, I suppose portability isn't the issue it once was with respect to
> boolean and signed integers. Here is the combined 1 and 2 patches. If
> its sufficient I'll resend the pull request as a V4.
>
Looks fine to me.
next prev parent reply other threads:[~2010-06-25 8:44 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-06-24 15:27 nf-next-2.6 pull request, Complete deprecation of CONFIG_NF_CT_ACCT (V3) Tim Gardner
2010-06-24 15:27 ` [PATCH 1/3] netfilter: Expose connection tracking accounting toggles Tim Gardner
2010-06-24 15:36 ` Patrick McHardy
2010-06-24 16:07 ` Tim Gardner
2010-06-24 17:14 ` Jan Engelhardt
2010-06-24 15:27 ` [PATCH 2/3] netfilter: xt_connbytes: Force CT accounting to be enabled Tim Gardner
2010-06-24 17:15 ` Jan Engelhardt
2010-06-24 18:49 ` Tim Gardner
2010-06-25 8:44 ` Patrick McHardy [this message]
2010-06-24 15:27 ` [PATCH 3/3] netfilter: Complete the deprecation of CONFIG_NF_CT_ACCT Tim Gardner
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4C246C85.1040704@trash.net \
--to=kaber@trash.net \
--cc=jengelh@medozas.de \
--cc=netfilter-devel@vger.kernel.org \
--cc=tim.gardner@canonical.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.