diff options
| author | Yi Yang <yangyi01@inspur.com> | 2020-10-19 11:04:22 +0800 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2020-10-20 12:56:25 +0200 |
| commit | a08af5d26297eb85218a3c3a9e0991001a88cf10 (patch) | |
| tree | 7acd43fe6de3d3a309bd3fb60c309cac6bc98f11 /src/build.c | |
| parent | e6adde47e34b02085b4cc474a5dc9750c91832dc (diff) | |
conntrack: fix zone sync issue
In some use cases, zone is used to differentiate different
conntrack state tables, so zone also should be synchronized
if it is set.
Signed-off-by: Yi Yang <yangyi01@inspur.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/build.c')
| -rw-r--r-- | src/build.c | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/src/build.c b/src/build.c index 99ff230..4771997 100644 --- a/src/build.c +++ b/src/build.c @@ -315,6 +315,9 @@ void ct2msg(const struct nf_conntrack *ct, struct nethdr *n) nfct_attr_is_set(ct, ATTR_SYNPROXY_ITS) && nfct_attr_is_set(ct, ATTR_SYNPROXY_TSOFF)) ct_build_synproxy(ct, n); + + if (nfct_attr_is_set(ct, ATTR_ZONE)) + ct_build_u16(ct, ATTR_ZONE, n, NTA_ZONE); } static void |