Patrick McHardy 124dff01af netfilter: don't reset nf_trace in nf_reset()
Commit 130549fe ("netfilter: reset nf_trace in nf_reset") added code
to reset nf_trace in nf_reset(). This is wrong and unnecessary.

nf_reset() is used in the following cases:

- when passing packets up the the socket layer, at which point we want to
  release all netfilter references that might keep modules pinned while
  the packet is queued. nf_trace doesn't matter anymore at this point.

- when encapsulating or decapsulating IPsec packets. We want to continue
  tracing these packets after IPsec processing.

- when passing packets through virtual network devices. Only devices on
  that encapsulate in IPv4/v6 matter since otherwise nf_trace is not
  used anymore. Its not entirely clear whether those packets should
  be traced after that, however we've always done that.

- when passing packets through virtual network devices that make the
  packet cross network namespace boundaries. This is the only cases
  where we clearly want to reset nf_trace and is also what the
  original patch intended to fix.

Add a new function nf_reset_trace() and use it in dev_forward_skb() to
fix this properly.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2013-04-05 15:38:10 -04:00
..
2013-03-02 16:33:54 -08:00
2013-02-21 15:27:22 -08:00
2013-03-01 13:39:00 -08:00
2013-03-28 15:51:33 -07:00
2013-01-02 17:36:10 -08:00
2013-02-21 12:11:44 -08:00
2013-03-02 16:46:07 -08:00
2013-01-03 14:34:06 -08:00
2012-12-02 00:05:12 +00:00
2013-03-19 19:15:52 +01:00
2013-02-21 12:05:51 -08:00
2012-12-24 09:36:38 -07:00
2013-02-26 02:46:08 -05:00
2013-01-24 09:04:04 +01:00
2013-02-22 23:31:31 -05:00
2013-01-25 21:03:54 -08:00
2013-02-06 15:59:47 -05:00
2012-12-14 13:05:26 +10:30
2013-01-29 13:59:57 -05:00
2013-01-10 11:44:38 -06:00
2013-01-29 19:32:58 -08:00
2012-12-12 17:38:33 -08:00
2013-03-22 16:41:20 -07:00
2013-01-21 17:18:20 +10:30
2012-12-14 13:06:40 +10:30
2012-12-25 18:45:06 -05:00
2013-03-02 16:46:07 -08:00
2012-12-11 17:22:27 -08:00
2013-02-25 21:18:18 -08:00
2013-02-21 12:05:51 -08:00
2013-02-21 13:41:04 -08:00
2013-01-24 15:37:26 +01:00
2013-01-03 15:57:14 -08:00
2013-02-26 09:34:29 -08:00
2013-01-23 13:44:00 -05:00
2013-02-21 12:05:51 -08:00
2013-02-19 08:43:34 +01:00
2013-03-19 19:15:52 +01:00
2012-12-18 15:02:13 -08:00
2012-12-18 15:02:14 -08:00
2013-02-10 19:41:08 -05:00
2012-12-24 09:36:38 -07:00
2013-02-14 09:21:15 -05:00
2013-02-21 14:58:40 -08:00
2013-01-15 22:43:15 -08:00
2013-03-20 12:10:38 -04:00
2013-02-08 18:28:04 +01:00
2013-01-25 15:06:01 -08:00