Re: [PATCH net 1/2] netfilter: conntrack: skip identical origin tuple in same zone only

2021-02-09 Thread patchwork-bot+netdevbpf
Hello: This series was applied to netdev/net.git (refs/heads/master): On Tue, 9 Feb 2021 22:35:10 +0100 you wrote: > From: Florian Westphal > > The origin skip check needs to re-test the zone. Else, we might skip > a colliding tuple in the reply direction. > > This only occurs when using 'dir

[PATCH net 1/2] netfilter: conntrack: skip identical origin tuple in same zone only

2021-02-09 Thread Pablo Neira Ayuso
From: Florian Westphal The origin skip check needs to re-test the zone. Else, we might skip a colliding tuple in the reply direction. This only occurs when using 'directional zones' where origin tuples reside in different zones but the reply tuples share the same zone. This causes the new connt