hsist
/
freifunkist-firmware
6
1
Fork 0
Code Issues Pull Requests Releases Wiki Activity

kernel: flow-offload: only offload connections that have been fully established

Browse Source 
Signed-off-by: Felix Fietkau <nbd@nbd.name>
master
Felix Fietkau 7 years ago
parent af3a9566fe
commit 2c7b0e9f31
1 changed files with 4 additions and 1 deletions
Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL
Show Stats Download Patch File Download Diff File
  1. 5
      target/linux/generic/hack-4.14/650-netfilter-add-xt_OFFLOAD-target.patch

5
target/linux/generic/hack-4.14/650-netfilter-add-xt_OFFLOAD-target.patch
Unescape View File

@ -98,7 +98,7 @@ Signed-off-by: Felix Fietkau <nbd@nbd.name>
obj-$(CONFIG_NETFILTER_XT_TARGET_LED) += xt_LED.o obj-$(CONFIG_NETFILTER_XT_TARGET_LED) += xt_LED.o
--- /dev/null --- /dev/null
+++ b/net/netfilter/xt_FLOWOFFLOAD.c +++ b/net/netfilter/xt_FLOWOFFLOAD.c
@@ -0,0 +1,335 @@ @@ -0,0 +1,338 @@
+/* +/*
+ * Copyright (C) 2018 Felix Fietkau <nbd@nbd.name> + * Copyright (C) 2018 Felix Fietkau <nbd@nbd.name>
+ * + *
@ -337,6 +337,9 @@ Signed-off-by: Felix Fietkau <nbd@nbd.name>
+ +
+ switch (ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.protonum) { + switch (ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.dst.protonum) {
+ case IPPROTO_TCP: + case IPPROTO_TCP:
+ if (ct->proto.tcp.state != TCP_CONNTRACK_ESTABLISHED)
+ return XT_CONTINUE;
+ break;
+ case IPPROTO_UDP: + case IPPROTO_UDP:
+ break; + break;
+ default: + default:

Write Preview
Loading…
Cancel
Save