On Fri, 8 Sep 2006, Venkat Yekkirala wrote: > @@ -114,6 +128,9 @@ static struct xt_target xt_connsecmark_t > .target = target, > .targetsize = sizeof(struct xt_connsecmark_target_info), > .table = "mangle", > + .hooks = (1 << NF_IP_LOCAL_IN) | > + (1 << NF_IP_FORWARD) | > + (1 << NF_IP_POST_ROUTING),
Why have you added constraints on the hooks? This breaks a bunch of things. > @@ -123,6 +140,9 @@ static struct xt_target xt_connsecmark_t > .target = target, > .targetsize = sizeof(struct xt_connsecmark_target_info), > .table = "mangle", > + .hooks = (1 << NF_IP6_LOCAL_IN) | > + (1 << NF_IP6_FORWARD) | > + (1 << NF_IP6_POST_ROUTING), > .me = THIS_MODULE, Ditto... > @@ -119,6 +129,9 @@ static struct xt_target xt_secmark_targe > .target = target, > .targetsize = sizeof(struct xt_secmark_target_info), > .table = "mangle", > + .hooks = (1 << NF_IP_LOCAL_IN) | > + (1 << NF_IP_FORWARD) | > + (1 << NF_IP_POST_ROUTING), > .me = THIS_MODULE, > }, > { > @@ -128,6 +141,9 @@ static struct xt_target xt_secmark_targe > .target = target, > .targetsize = sizeof(struct xt_secmark_target_info), > .table = "mangle", > + .hooks = (1 << NF_IP6_LOCAL_IN) | > + (1 << NF_IP6_FORWARD) | > + (1 << NF_IP6_POST_ROUTING), > .me = THIS_MODULE, > }, > }; > -- James Morris <[EMAIL PROTECTED]> - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html