Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 1db7a748 authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso Committed by Patrick McHardy
Browse files

netfilter: conntrack: increase drop stats if sequence adjustment fails 



This patch increases the statistics of packets drop if the sequence
adjustment fails in ipv4_confirm().

Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
parent 67c0d579

net/ipv4/netfilter/nf_conntrack_l3proto_ipv4.c

+3 −1
Original line number Diff line number Diff line
@@ -120,9 +120,11 @@ static unsigned int ipv4_confirm(unsigned int hooknum, 
		typeof(nf_nat_seq_adjust_hook) seq_adjust;



		seq_adjust = rcu_dereference(nf_nat_seq_adjust_hook);

		if (!seq_adjust || !seq_adjust(skb, ct, ctinfo))

		if (!seq_adjust || !seq_adjust(skb, ct, ctinfo)) {

			NF_CT_STAT_INC_ATOMIC(nf_ct_net(ct), drop);

			return NF_DROP;

		}

	}

out:

	/* We've seen it coming out the other side: confirm it */

	return nf_conntrack_confirm(skb);