Revision a82c25c366b0963d33ddf699196e6cf57f6d89b1 authored by Florian Westphal on 08 March 2022, 12:52:11 UTC, committed by Florian Westphal on 08 March 2022, 12:52:11 UTC
This reverts commit 878aed8db324bec64f3c3f956e64d5ae7375a5de. This change breaks existing setups where conntrack is used with asymmetric paths. In these cases, the NAT transformation occurs on the syn-ack instead of the syn: 1. SYN x:12345 -> y -> 443 // sent by initiator, receiverd by responder 2. SYNACK y:443 -> x:12345 // First packet seen by conntrack, as sent by responder 3. tuple_force_port_remap() gets called, sees: 'tcp from 443 to port 12345 NAT' -> pick a new source port, inititor receives 4. SYNACK y:$RANDOM -> x:12345 // connection is never established While its possible to avoid the breakage with NOTRACK rules, a kernel update should not break working setups. An alternative to the revert is to augment conntrack to tag mid-stream connections plus more code in the nat core to skip NAT for such connections, however, this leads to more interaction/integration between conntrack and NAT. Therefore, revert, users will need to add explicit nat rules to avoid port shadowing. Link: https://lore.kernel.org/netfilter-devel/20220302105908.GA5852@breakpoint.cc/#R Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2051413 Signed-off-by: Florian Westphal <fw@strlen.de>
1 parent f8e9bd3
File | Mode | Size |
---|---|---|
blink | ||
flash | ||
simple | ||
trigger | ||
Kconfig | -rw-r--r-- | 26.5 KB |
Makefile | -rw-r--r-- | 4.3 KB |
TODO | -rw-r--r-- | 2.6 KB |
led-class-flash.c | -rw-r--r-- | 10.7 KB |
led-class-multicolor.c | -rw-r--r-- | 5.0 KB |
led-class.c | -rw-r--r-- | 13.0 KB |
led-core.c | -rw-r--r-- | 13.0 KB |
led-triggers.c | -rw-r--r-- | 11.1 KB |
leds-88pm860x.c | -rw-r--r-- | 5.7 KB |
leds-acer-a500.c | -rw-r--r-- | 3.4 KB |
leds-adp5520.c | -rw-r--r-- | 4.8 KB |
leds-an30259a.c | -rw-r--r-- | 8.6 KB |
leds-apu.c | -rw-r--r-- | 6.2 KB |
leds-ariel.c | -rw-r--r-- | 3.0 KB |
leds-asic3.c | -rw-r--r-- | 4.4 KB |
leds-aw2013.c | -rw-r--r-- | 9.4 KB |
leds-bcm6328.c | -rw-r--r-- | 12.7 KB |
leds-bcm6358.c | -rw-r--r-- | 5.2 KB |
leds-bd2802.c | -rw-r--r-- | 20.4 KB |
leds-blinkm.c | -rw-r--r-- | 18.1 KB |
leds-clevo-mail.c | -rw-r--r-- | 5.4 KB |
leds-cobalt-qube.c | -rw-r--r-- | 1.6 KB |
leds-cobalt-raq.c | -rw-r--r-- | 2.2 KB |
leds-cpcap.c | -rw-r--r-- | 4.9 KB |
leds-cr0014114.c | -rw-r--r-- | 6.7 KB |
leds-da903x.c | -rw-r--r-- | 3.6 KB |
leds-da9052.c | -rw-r--r-- | 4.4 KB |
leds-dac124s085.c | -rw-r--r-- | 2.4 KB |
leds-el15203000.c | -rw-r--r-- | 8.7 KB |
leds-gpio-register.c | -rw-r--r-- | 1.2 KB |
leds-gpio.c | -rw-r--r-- | 7.9 KB |
leds-hp6xx.c | -rw-r--r-- | 1.8 KB |
leds-ip30.c | -rw-r--r-- | 1.8 KB |
leds-ipaq-micro.c | -rw-r--r-- | 3.5 KB |
leds-is31fl319x.c | -rw-r--r-- | 12.0 KB |
leds-is31fl32xx.c | -rw-r--r-- | 13.0 KB |
leds-lm3530.c | -rw-r--r-- | 12.6 KB |
leds-lm3532.c | -rw-r--r-- | 18.5 KB |
leds-lm3533.c | -rw-r--r-- | 17.5 KB |
leds-lm355x.c | -rw-r--r-- | 12.4 KB |
leds-lm36274.c | -rw-r--r-- | 4.2 KB |
leds-lm3642.c | -rw-r--r-- | 10.1 KB |
leds-lm3692x.c | -rw-r--r-- | 12.9 KB |
leds-lm3697.c | -rw-r--r-- | 9.6 KB |
leds-locomo.c | -rw-r--r-- | 1.9 KB |
leds-lp3944.c | -rw-r--r-- | 10.5 KB |
leds-lp3952.c | -rw-r--r-- | 6.6 KB |
leds-lp50xx.c | -rw-r--r-- | 16.7 KB |
leds-lp5521.c | -rw-r--r-- | 15.4 KB |
leds-lp5523.c | -rw-r--r-- | 23.6 KB |
leds-lp5562.c | -rw-r--r-- | 14.6 KB |
leds-lp55xx-common.c | -rw-r--r-- | 16.2 KB |
leds-lp55xx-common.h | -rw-r--r-- | 6.0 KB |
leds-lp8501.c | -rw-r--r-- | 9.2 KB |
leds-lp8788.c | -rw-r--r-- | 3.7 KB |
leds-lp8860.c | -rw-r--r-- | 12.0 KB |
leds-lt3593.c | -rw-r--r-- | 3.2 KB |
leds-max77650.c | -rw-r--r-- | 3.6 KB |
leds-max8997.c | -rw-r--r-- | 7.4 KB |
leds-mc13783.c | -rw-r--r-- | 7.4 KB |
leds-menf21bmc.c | -rw-r--r-- | 2.5 KB |
leds-mlxcpld.c | -rw-r--r-- | 11.9 KB |
leds-mlxreg.c | -rw-r--r-- | 8.8 KB |
leds-mt6323.c | -rw-r--r-- | 12.3 KB |
leds-net48xx.c | -rw-r--r-- | 1.8 KB |
leds-netxbig.c | -rw-r--r-- | 15.4 KB |
leds-nic78bx.c | -rw-r--r-- | 4.5 KB |
leds-ns2.c | -rw-r--r-- | 6.5 KB |
leds-ot200.c | -rw-r--r-- | 2.7 KB |
leds-pca9532.c | -rw-r--r-- | 14.1 KB |
leds-pca955x.c | -rw-r--r-- | 17.2 KB |
leds-pca963x.c | -rw-r--r-- | 10.6 KB |
leds-pm8058.c | -rw-r--r-- | 4.2 KB |
leds-powernv.c | -rw-r--r-- | 8.8 KB |
leds-pwm.c | -rw-r--r-- | 4.9 KB |
leds-rb532.c | -rw-r--r-- | 1.5 KB |
leds-regulator.c | -rw-r--r-- | 4.4 KB |
leds-s3c24xx.c | -rw-r--r-- | 2.0 KB |
leds-sc27xx-bltc.c | -rw-r--r-- | 8.9 KB |
leds-spi-byte.c | -rw-r--r-- | 4.4 KB |
leds-ss4200.c | -rw-r--r-- | 14.0 KB |
leds-sunfire.c | -rw-r--r-- | 5.5 KB |
leds-syscon.c | -rw-r--r-- | 3.2 KB |
leds-tca6507.c | -rw-r--r-- | 20.6 KB |
leds-ti-lmu-common.c | -rw-r--r-- | 3.8 KB |
leds-tlc591xx.c | -rw-r--r-- | 5.4 KB |
leds-tps6105x.c | -rw-r--r-- | 2.3 KB |
leds-turris-omnia.c | -rw-r--r-- | 7.3 KB |
leds-wm831x-status.c | -rw-r--r-- | 6.7 KB |
leds-wm8350.c | -rw-r--r-- | 5.0 KB |
leds-wrap.c | -rw-r--r-- | 2.7 KB |
leds.h | -rw-r--r-- | 1.2 KB |
uleds.c | -rw-r--r-- | 4.7 KB |
![swh spinner](/static/img/swh-spinner.gif)
Computing file changes ...