Patrick McHardy b59c270104 [NETFILTER]: Keep conntrack reference until IPsec policy checks are done ...

Keep the conntrack reference until policy checks have been performed for
IPsec NAT support. The reference needs to be dropped before a packet is
queued to avoid having the conntrack module unloadable.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2006-01-07 12:57:36 -08:00

46 KiB

Raw Blame History

View Raw