From a08af5d26297eb85218a3c3a9e0991001a88cf10 Mon Sep 17 00:00:00 2001 From: Yi Yang Date: Mon, 19 Oct 2020 11:04:22 +0800 Subject: conntrack: fix zone sync issue In some use cases, zone is used to differentiate different conntrack state tables, so zone also should be synchronized if it is set. Signed-off-by: Yi Yang Signed-off-by: Pablo Neira Ayuso --- src/build.c | 3 +++ 1 file changed, 3 insertions(+) (limited to 'src/build.c') diff --git a/src/build.c b/src/build.c index 99ff230..4771997 100644 --- a/src/build.c +++ b/src/build.c @@ -315,6 +315,9 @@ void ct2msg(const struct nf_conntrack *ct, struct nethdr *n) nfct_attr_is_set(ct, ATTR_SYNPROXY_ITS) && nfct_attr_is_set(ct, ATTR_SYNPROXY_TSOFF)) ct_build_synproxy(ct, n); + + if (nfct_attr_is_set(ct, ATTR_ZONE)) + ct_build_u16(ct, ATTR_ZONE, n, NTA_ZONE); } static void -- cgit v1.2.3