Re: [PATCH nf-next v7 5/7] openvswitch: Handle NF_REPEAT in conntrack action.

2016-02-18 Thread Pablo Neira Ayuso
On Wed, Feb 17, 2016 at 02:06:54PM -0800, Joe Stringer wrote: > On 5 February 2016 at 17:41, Jarno Rajahalme wrote: > > Repeat the nf_conntrack_in() call when it returns NF_REPEAT. This > > avoids dropping a SYN packet re-opening an existing TCP connection. > > > > Signed-off-by: Jarno Rajahalme

Re: [PATCH nf-next v7 5/7] openvswitch: Handle NF_REPEAT in conntrack action.

2016-02-17 Thread Joe Stringer
On 5 February 2016 at 17:41, Jarno Rajahalme wrote: > Repeat the nf_conntrack_in() call when it returns NF_REPEAT. This > avoids dropping a SYN packet re-opening an existing TCP connection. > > Signed-off-by: Jarno Rajahalme Arguably this is a bugfix. Acked-by: Joe Stringer

[PATCH nf-next v7 5/7] openvswitch: Handle NF_REPEAT in conntrack action.

2016-02-05 Thread Jarno Rajahalme
Repeat the nf_conntrack_in() call when it returns NF_REPEAT. This avoids dropping a SYN packet re-opening an existing TCP connection. Signed-off-by: Jarno Rajahalme --- net/openvswitch/conntrack.c | 10 -- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/net/openvswitch/con