Skip to content
Commit b0e214d2 authored by Madhu Koriginja's avatar Madhu Koriginja Committed by Florian Westphal
Browse files

netfilter: keep conntrack reference until IPsecv6 policy checks are done



Keep the conntrack reference until policy checks have been performed for
IPsec V6 NAT support, just like ipv4.

The reference needs to be dropped before a packet is
queued to avoid having the conntrack module unloadable.

Fixes: 58a317f1 ("netfilter: ipv6: add IPv6 NAT support")
Signed-off-by: default avatarMadhu Koriginja <madhu.koriginja@nxp.com>
Signed-off-by: default avatarFlorian Westphal <fw@strlen.de>
parent 36ce9982
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment