Re: [PATCH nf] netfilter: nfnetlink_queue: reject verdict request from different portid

2016-08-10 Thread Pablo Neira Ayuso
On Mon, Aug 08, 2016 at 10:07:27PM +0800, Liping Zhang wrote: > From: Liping Zhang > > Like NFQNL_MSG_VERDICT_BATCH do, we should also reject the verdict > request when the portid is not same with the initial portid(maybe > from another process). Applied, thanks. --

Re: [PATCH nf] netfilter: nfnetlink_queue: reject verdict request from different portid

2016-08-08 Thread Florian Westphal
Liping Zhang wrote: > From: Liping Zhang > > Like NFQNL_MSG_VERDICT_BATCH do, we should also reject the verdict > request when the portid is not same with the initial portid(maybe > from another process). > > Fixes: 97d32cf9440d ("netfilter:

[PATCH nf] netfilter: nfnetlink_queue: reject verdict request from different portid

2016-08-08 Thread Liping Zhang
From: Liping Zhang Like NFQNL_MSG_VERDICT_BATCH do, we should also reject the verdict request when the portid is not same with the initial portid(maybe from another process). Fixes: 97d32cf9440d ("netfilter: nfnetlink_queue: batch verdict support") Signed-off-by: