netfilter: synproxy: fix conntrackd interaction
authorEric Leblond <eric@regit.org>
Thu, 11 May 2017 16:56:38 +0000 (18:56 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 5 Jul 2017 12:40:16 +0000 (14:40 +0200)
commitb89bd0c715c148ea3cfef6b250482a77225573b5
treef1ba2e1f0a3e319a4f09b296bf1a9b82659f93c7
parentced7689be60ddcac4b1746212c547e8817c5ae5e
netfilter: synproxy: fix conntrackd interaction

commit 87e94dbc210a720a34be5c1174faee5c84be963e upstream.

This patch fixes the creation of connection tracking entry from
netlink when synproxy is used. It was missing the addition of
the synproxy extension.

This was causing kernel crashes when a conntrack entry created by
conntrackd was used after the switch of traffic from active node
to the passive node.

Signed-off-by: Eric Leblond <eric@regit.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nf_conntrack_netlink.c