Re: 2.6.12: connection tracking broken?

Patrick McHardy
2005-06-21T01:42:29Z

Phil Oester wrote:
> The changes were originally made to fix conntrack unload problems with
> raw sockets. My original patch performed the nf_reset in the socket
> code, but Patrick suggested moving it to ip_output. The below patch
> reverts the ip_output changes, and implements the original suggested
> changes to raw socket handling.
>
> While this is unlikely to be the permanent solution, it will fix the
> current bridging problems while retaining the raw socket fixes. I'd
> suggest that this could be included in -stable while researching
> other solutions.

I disagree. We will probably have a final solution within a few days,
so I don't think we need to submit "temporary" fixes yet. Your patch
actually causes a regression for people not using bringe-netfilter,
unplugging a network cable can cause the conntrack module to become
unloadable again.

Regards
Patrick