From: Patrick McHardy <kaber@trash.net>
To: tim.gardner@canonical.com
Cc: Jan Engelhardt <jengelh@medozas.de>, netfilter-devel@vger.kernel.org
Subject: Re: [PATCH 2/3] netfilter: xt_connbytes: Force CT accounting to be enabled
Date: Fri, 25 Jun 2010 10:44:53 +0200 [thread overview]
Message-ID: <4C246C85.1040704@trash.net> (raw)
In-Reply-To: <4C23A8C1.2070506@canonical.com>
Tim Gardner wrote:
> On 06/24/2010 11:15 AM, Jan Engelhardt wrote:
>>
>> On Thursday 2010-06-24 17:27, Tim Gardner wrote:
>>> diff --git a/net/netfilter/xt_connbytes.c
>>> b/net/netfilter/xt_connbytes.c
>>> index 7351783..b0cda8c 100644
>>> --- a/net/netfilter/xt_connbytes.c
>>> +++ b/net/netfilter/xt_connbytes.c
>>> @@ -112,6 +112,16 @@ static int connbytes_mt_check(const struct
>>> xt_mtchk_param *par)
>>> if (ret< 0)
>>> pr_info("cannot load conntrack support for proto=%u\n",
>>> par->family);
>>> +
>>> + /*
>>> + * This filter cannot function correctly unless connection
>>> tracking
>>> + * accounting is enabled, so complain in the hope that someone
>>> notices.
>>> + */
>>> + if (nf_ct_acct_enabled(par) == false) {
>>
>> if (!nfct_acct_enabled(par)) {
>>
>>> + pr_warning("Forcing CT accounting to be enabled\n");
>>> + nf_ct_set_acct(par, true);
>>> + }
>>> +
>>> return ret;
>>> }
>> --
>
> meh, I suppose portability isn't the issue it once was with respect to
> boolean and signed integers. Here is the combined 1 and 2 patches. If
> its sufficient I'll resend the pull request as a V4.
>
Looks fine to me.
next prev parent reply other threads:[~2010-06-25 8:44 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-06-24 15:27 nf-next-2.6 pull request, Complete deprecation of CONFIG_NF_CT_ACCT (V3) Tim Gardner
2010-06-24 15:27 ` [PATCH 1/3] netfilter: Expose connection tracking accounting toggles Tim Gardner
2010-06-24 15:36 ` Patrick McHardy
2010-06-24 16:07 ` Tim Gardner
2010-06-24 17:14 ` Jan Engelhardt
2010-06-24 15:27 ` [PATCH 2/3] netfilter: xt_connbytes: Force CT accounting to be enabled Tim Gardner
2010-06-24 17:15 ` Jan Engelhardt
2010-06-24 18:49 ` Tim Gardner
2010-06-25 8:44 ` Patrick McHardy [this message]
2010-06-24 15:27 ` [PATCH 3/3] netfilter: Complete the deprecation of CONFIG_NF_CT_ACCT Tim Gardner
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4C246C85.1040704@trash.net \
--to=kaber@trash.net \
--cc=jengelh@medozas.de \
--cc=netfilter-devel@vger.kernel.org \
--cc=tim.gardner@canonical.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).