netfilter: nf_conntrack: Support expectations in different zones
authorJoe Stringer <joestringer@nicira.com>
Wed, 22 Jul 2015 04:37:31 +0000 (21:37 -0700)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 22 Jul 2015 15:00:47 +0000 (17:00 +0200)
commit4b31814d20cbe5cd4ccf18089751e77a04afe4f2
treee42ee4d2f3f0353dbd93a6d6a7b11e1771aad883
parentb64f48dcda47ac74c890a8e18a62173f62039643
netfilter: nf_conntrack: Support expectations in different zones

When zones were originally introduced, the expectation functions were
all extended to perform lookup using the zone. However, insertion was
not modified to check the zone. This means that two expectations which
are intended to apply for different connections that have the same tuple
but exist in different zones cannot both be tracked.

Fixes: 5d0aa2ccd4 (netfilter: nf_conntrack: add support for "conntrack zones")
Signed-off-by: Joe Stringer <joestringer@nicira.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_expect.c