: clear nf_debug for ipsec tunnel packets

PATCH Superseded Patrick McHardy 1 participant 1 message Aug 24, 2003 netfilter

lore

Share & tools

lore

Patrick McHardy

author

2003-08-24 22:35 UTC #0 lore raw

PATCH 1/1 : clear nf_debug for ipsec tunnel packets

Hi Harald,

this patch for 2.6 clears nf_debug in ip_local_deliver_finish so the "hook ... already set" message in nf_hook_slow won't get triggered for decapsulated ipsec-tunnel packets when passing them through the network stack again.

Best regards,
Patrick

patch-o-matic_2.5/pending/27-ipsec_tunnel-nf_debug.diff +11 -0

diff -urN a/patch-o-matic_2.5/pending/27-ipsec_tunnel-nf_debug.diff b/patch-o-matic_2.5/pending/27-ipsec_tunnel-nf_debug.diff
@@ -0,0 +1,11 @@
+===== net/ipv4/ip_input.c 1.17 vs edited =====
+--- 1.17/net/ipv4/ip_input.c	Mon Jun 16 17:11:36 2003
++++ edited/net/ipv4/ip_input.c	Sun Aug 24 23:11:36 2003
+@@ -201,6 +201,7 @@
+ 
+ #ifdef CONFIG_NETFILTER_DEBUG
+ 	nf_debug_ip_local_deliver(skb);
++	skb->nf_debug = 0;
+ #endif /*CONFIG_NETFILTER_DEBUG*/
+ 
+ 	__skb_pull(skb, ihl);

patch-o-matic_2.5/pending/27-ipsec_tunnel-nf_debug.diff.help +7 -0

diff -urN a/patch-o-matic_2.5/pending/27-ipsec_tunnel-nf_debug.diff.help b/patch-o-matic_2.5/pending/27-ipsec_tunnel-nf_debug.diff.help
@@ -0,0 +1,7 @@
+Author: Patrick McHardy <[email protected]>
+Status: Working
+
+This patch clears nf_debug in ip_local_deliver_finish so the
+"hook ... already set" message in nf_hook_slow won't get triggered for
+decapsulated ipsec-tunnel packets when passing them through the network
+stack again.