* Conntrack helper question
@ 2012-11-27 1:03 Sebastian Zander
2012-11-30 13:42 ` Pablo Neira Ayuso
0 siblings, 1 reply; 2+ messages in thread
From: Sebastian Zander @ 2012-11-27 1:03 UTC (permalink / raw)
To: netfilter-devel; +Cc: Sebastian Zander
Hi netfilter devs,
In current Netfilter is there still a way for a conntrack helper to
listen to all TCP traffic _independent_ of ports to look for primary
connections (other than registering with 65535 tuples)? Not that I
advocate this, I just have some old piece of code that apparently did
that in ancient 2.6 kernels (ports set to zero in the tuple).
Please cc me, since I'm not on the list. Many thanks in advance!
Cheers,
Sebastian
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: Conntrack helper question
2012-11-27 1:03 Conntrack helper question Sebastian Zander
@ 2012-11-30 13:42 ` Pablo Neira Ayuso
0 siblings, 0 replies; 2+ messages in thread
From: Pablo Neira Ayuso @ 2012-11-30 13:42 UTC (permalink / raw)
To: Sebastian Zander; +Cc: netfilter-devel
On Tue, Nov 27, 2012 at 12:03:31PM +1100, Sebastian Zander wrote:
> Hi netfilter devs,
>
> In current Netfilter is there still a way for a conntrack helper to
> listen to all TCP traffic _independent_ of ports to look for primary
> connections (other than registering with 65535 tuples)? Not that I
> advocate this, I just have some old piece of code that apparently
> did that in ancient 2.6 kernels (ports set to zero in the tuple).
With recent kernels you can attach your helper via -j CT --helper ...
to all ports for some specific layer 4 protocol, eg. TCP.
The ports specified in the registration are simply ignored, we still
keep them there to support for old behaviour for quite some time
though.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2012-11-30 13:42 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2012-11-27 1:03 Conntrack helper question Sebastian Zander
2012-11-30 13:42 ` Pablo Neira Ayuso
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).