patch-2.4.21 linux-2.4.21/net/ipv4/netfilter/ipt_conntrack.c

Next file: linux-2.4.21/net/ipv4/netfilter/ipt_multiport.c
Previous file: linux-2.4.21/net/ipv4/netfilter/ipt_ULOG.c
Back to the patch index
Back to the overall index

diff -urN linux-2.4.20/net/ipv4/netfilter/ipt_conntrack.c linux-2.4.21/net/ipv4/netfilter/ipt_conntrack.c
@@ -27,7 +27,11 @@
 
 #define FWINV(bool,invflg) ((bool) ^ !!(sinfo->invflags & invflg))
 
-	statebit = ct ? IPT_CONNTRACK_STATE_INVALID : IPT_CONNTRACK_STATE_BIT(ctinfo);
+	if (ct)
+		statebit = IPT_CONNTRACK_STATE_BIT(ctinfo);
+	else
+		statebit = IPT_CONNTRACK_STATE_INVALID;
+
 	if(sinfo->flags & IPT_CONNTRACK_STATE) {
 		if (ct) {
 			if(ct->tuplehash[IP_CT_DIR_ORIGINAL].tuple.src.ip !=

FUNET's LINUX-ADM group, linux-adm@nic.funet.fi
TCL-scripts by Sam Shen (who was at: slshen@lbl.gov)