Commit f7becf0d authored by Florian Westphal's avatar Florian Westphal
Browse files

netfilter: nf_conntrack: enable icmp clash support 



Not strictly required, but should not be harmful either:
This isn't a stateful protocol, hence clash resolution should work fine.

Signed-off-by: default avatarFlorian Westphal <fw@strlen.de>
parent 21d033e4

net/netfilter/nf_conntrack_proto_icmp.c

+1 −0
Original line number Diff line number Diff line
@@ -365,6 +365,7 @@ void nf_conntrack_icmp_init_net(struct net *net) 
const struct nf_conntrack_l4proto nf_conntrack_l4proto_icmp =

{

	.l4proto		= IPPROTO_ICMP,

	.allow_clash		= true,

#if IS_ENABLED(CONFIG_NF_CT_NETLINK)

	.tuple_to_nlattr	= icmp_tuple_to_nlattr,

	.nlattr_tuple_size	= icmp_nlattr_tuple_size,

net/netfilter/nf_conntrack_proto_icmpv6.c

+1 −0
Original line number Diff line number Diff line
@@ -343,6 +343,7 @@ void nf_conntrack_icmpv6_init_net(struct net *net) 
const struct nf_conntrack_l4proto nf_conntrack_l4proto_icmpv6 =

{

	.l4proto		= IPPROTO_ICMPV6,

	.allow_clash		= true,

#if IS_ENABLED(CONFIG_NF_CT_NETLINK)

	.tuple_to_nlattr	= icmpv6_tuple_to_nlattr,

	.nlattr_tuple_size	= icmpv6_nlattr_tuple_size,