diff options
| author |   Pablo Neira Ayuso <pablo@netfilter.org> | 2007-12-17 22:28:00 -0800 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2008-01-28 14:58:50 -0800 |
| commit | 13eae15a244bb29beaa47bf86a24fd29ca7f8a4c (patch) | |
| tree | 27a1a1e6498033c5aa440ced5242016fd808c560 /include/linux/netfilter/nf_conntrack_common.h | |
| parent | [NETFILTER]: xt_TCPMSS: don't allow netfilter --setmss to increase mss (diff) | |
| download | linux-dev-13eae15a244bb29beaa47bf86a24fd29ca7f8a4c.tar.xz linux-dev-13eae15a244bb29beaa47bf86a24fd29ca7f8a4c.zip | |
[NETFILTER]: ctnetlink: add support for NAT sequence adjustments
The combination of NAT and helpers may produce TCP sequence adjustments.
In failover setups, this information needs to be replicated in order to
achieve a successful recovery of mangled, related connections. This patch is
particularly useful for conntrackd, see:
http://people.netfilter.org/pablo/conntrack-tools/
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include/linux/netfilter/nf_conntrack_common.h')
| -rw-r--r-- | include/linux/netfilter/nf_conntrack_common.h | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/include/linux/netfilter/nf_conntrack_common.h b/include/linux/netfilter/nf_conntrack_common.h index 9e0dae07861e..19747e8f71cf 100644 --- a/include/linux/netfilter/nf_conntrack_common.h +++ b/include/linux/netfilter/nf_conntrack_common.h @@ -129,6 +129,10 @@ enum ip_conntrack_events /* Mark is set */ IPCT_MARK_BIT = 12, IPCT_MARK = (1 << IPCT_MARK_BIT), + + /* NAT sequence adjustment */ + IPCT_NATSEQADJ_BIT = 13, + IPCT_NATSEQADJ = (1 << IPCT_NATSEQADJ_BIT), }; enum ip_conntrack_expect_events { |