From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pablo Neira Ayuso Subject: Re: netfilter: ct_extend: alloc space for xt_portscan Date: Thu, 08 Jan 2009 18:11:27 +0100 Message-ID: <496633BF.7060609@netfilter.org> References: Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit Cc: kaber@trash.net, Netfilter Developer Mailing List To: Jan Engelhardt Return-path: Received: from mail.us.es ([193.147.175.20]:47178 "EHLO us.es" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1761492AbZAHRLh (ORCPT ); Thu, 8 Jan 2009 12:11:37 -0500 In-Reply-To: Sender: netfilter-devel-owner@vger.kernel.org List-ID: Jan Engelhardt wrote: > parent b58602a4bac012b5f4fc12fe6b46ab237b610d5d > commit 7634e5f586394eafc85973712ff11e60a9ae2f70 > Author: Jan Engelhardt > Date: Thu Jan 8 09:20:03 2009 +0100 > > netfilter: ct_extend: alloc space for xt_portscan > > The out-of-tree xt_portscan module currently (ab)uses skb->mark and > nfct->mark to store its state, but such may collide with > user-specified marks. > > Using nfct_extend alleviates that problem and hopefully paves way > for inclusion of the module. > > Signed-off-by: Jan Engelhardt > --- > include/net/netfilter/nf_conntrack_extend.h | 1 + > 1 files changed, 1 insertions(+), 0 deletions(-) > > diff --git a/include/net/netfilter/nf_conntrack_extend.h b/include/net/netfilter/nf_conntrack_extend.h > index da8ee52..389794a 100644 > --- a/include/net/netfilter/nf_conntrack_extend.h > +++ b/include/net/netfilter/nf_conntrack_extend.h > @@ -8,6 +8,7 @@ enum nf_ct_ext_id > NF_CT_EXT_HELPER, > NF_CT_EXT_NAT, > NF_CT_EXT_ACCT, > + NF_CT_EXT_PORTSCAN, /* xt_portscan state */ > NF_CT_EXT_NUM, > }; Sorry, I would not reserve an entry unless I know what xt_portscan is. -- "Los honestos son inadaptados sociales" -- Les Luthiers