2fc72c7b84
The IPv6 tproxy patches split IPv6 defragmentation off of conntrack, but failed to update the #ifdef stanzas guarding the defragmentation related fields and code in skbuff and conntrack related code in nf_defrag_ipv6.c. This patch adds the required #ifdefs so that IPv6 tproxy can truly be used without connection tracking. Original report: http://marc.info/?l=linux-netdev&m=129010118516341&w=2 Reported-by: Randy Dunlap <randy.dunlap@oracle.com> Acked-by: Randy Dunlap <randy.dunlap@oracle.com> Signed-off-by: KOVACS Krisztian <hidden@balabit.hu> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
14 lines
422 B
C
14 lines
422 B
C
#ifndef _NF_CONNTRACK_IPV6_H
|
|
#define _NF_CONNTRACK_IPV6_H
|
|
|
|
extern struct nf_conntrack_l3proto nf_conntrack_l3proto_ipv6;
|
|
|
|
extern struct nf_conntrack_l4proto nf_conntrack_l4proto_tcp6;
|
|
extern struct nf_conntrack_l4proto nf_conntrack_l4proto_udp6;
|
|
extern struct nf_conntrack_l4proto nf_conntrack_l4proto_icmpv6;
|
|
|
|
#include <linux/sysctl.h>
|
|
extern struct ctl_table nf_ct_ipv6_sysctl_table[];
|
|
|
|
#endif /* _NF_CONNTRACK_IPV6_H*/
|