projects / platform / core / security / nether.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 023ead2) | patch
Change Nether rule to use raw table for UDP packet. 60/183260/2
authorjin-gyu.kim <jin-gyu.kim@samsung.com>
Wed, 4 Jul 2018 02:50:05 +0000 (11:50 +0900)
committerjin-gyu.kim <jin-gyu.kim@samsung.com>
Wed, 4 Jul 2018 02:57:57 +0000 (11:57 +0900)
commit4a5bc12bc2109f12fad1352580b4e227cf970114
tree038692f754307ce88fe6ccd62b0386f6f2da3acftree | snapshot
parent023ead25336a8d3f7a35d1bd0d7d248b8f19daabcommit | diff
Change Nether rule to use raw table for UDP packet.

UDP packets are dropped unexpectedly if those are included into NFQUEUE
simultaneously. This seems to be bug in conntrack, can be avoided
if raw table is used. It requires the kernel support to enable
CONFIG_IP_NF_RAW and change priority in nf_ip_hook_priorities.

Change-Id: I8f3b3e1ecf69a44486757f27c61b34da02f4fb42
conf/nether.rules diff | blob | history
Domain: Security / Access Control;