From mboxrd@z Thu Jan 1 00:00:00 1970 From: Patrick McHardy Subject: Re: [PATCH 1/5] Add support for NAT sequence adjustments Date: Tue, 11 Dec 2007 17:48:39 +0100 Message-ID: <475EBF67.4070503@trash.net> References: <475C302C.1070402@netfilter.org> <475C3D6E.9000800@trash.net> <475EB336.2030503@netfilter.org> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: Netfilter Development Mailinglist To: Pablo Neira Ayuso Return-path: Received: from stinky.trash.net ([213.144.137.162]:52749 "EHLO stinky.trash.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1750952AbXLKQs5 (ORCPT ); Tue, 11 Dec 2007 11:48:57 -0500 In-Reply-To: <475EB336.2030503@netfilter.org> Sender: netfilter-devel-owner@vger.kernel.org List-ID: Pablo Neira Ayuso wrote: > Patrick McHardy wrote: >> Pablo Neira Ayuso wrote: >>> The combination of NAT and helpers may produce TCP sequence >>> adjustments. >>> In failover setups, this information needs to be replicated in order to >>> achieve a successful recovery of mangled, related connections. This >>> patch is particularly useful for conntrackd, see: >>> >>> >> + /* NAT sequence adjustment */ >> + IPCT_NATSEQADJ_BIT = 13, >> + IPCT_NATSEQADJ = (1 << IPCT_NATSEQADJ_BIT), >> >> You don't seem to be using this bit for anything. > > Hm, I think I did. > Right, I mistook it for a status bit and didn't pay attention to the events. Let me look at this again :)