netfilter: conntrack: increase drop stats if sequence adjustment fails
This patch increases the statistics of packets drop if the sequence adjustment fails in ipv4_confirm(). Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Patrick McHardy <kaber@trash.net>
This commit is contained in:
parent
67c0d57930
commit
1db7a748df
|
@ -120,8 +120,10 @@ static unsigned int ipv4_confirm(unsigned int hooknum,
|
||||||
typeof(nf_nat_seq_adjust_hook) seq_adjust;
|
typeof(nf_nat_seq_adjust_hook) seq_adjust;
|
||||||
|
|
||||||
seq_adjust = rcu_dereference(nf_nat_seq_adjust_hook);
|
seq_adjust = rcu_dereference(nf_nat_seq_adjust_hook);
|
||||||
if (!seq_adjust || !seq_adjust(skb, ct, ctinfo))
|
if (!seq_adjust || !seq_adjust(skb, ct, ctinfo)) {
|
||||||
|
NF_CT_STAT_INC_ATOMIC(nf_ct_net(ct), drop);
|
||||||
return NF_DROP;
|
return NF_DROP;
|
||||||
|
}
|
||||||
}
|
}
|
||||||
out:
|
out:
|
||||||
/* We've seen it coming out the other side: confirm it */
|
/* We've seen it coming out the other side: confirm it */
|
||||||
|
|
Loading…
Reference in a new issue