From 7792b5319695098418de562dad87bbc0fef6d19c Mon Sep 17 00:00:00 2001 From: Christian Poessinger Date: Sat, 15 May 2021 10:55:33 +0200 Subject: conntrack: T3535: add support for icmp6 and dccp --- data/templates/conntrackd/conntrackd.conf.tmpl | 4 ++++ interface-definitions/service_conntrack-sync.xml.in | 20 ++++++++++++++------ 2 files changed, 18 insertions(+), 6 deletions(-) diff --git a/data/templates/conntrackd/conntrackd.conf.tmpl b/data/templates/conntrackd/conntrackd.conf.tmpl index 6f9fa51b0..fdaac7275 100644 --- a/data/templates/conntrackd/conntrackd.conf.tmpl +++ b/data/templates/conntrackd/conntrackd.conf.tmpl @@ -95,7 +95,11 @@ General { {% if accept_protocol is defined and accept_protocol is not none %} Protocol Accept { {% for protocol in accept_protocol %} +{% if protocol == 'icmp6' %} + IPv6-ICMP +{% else %} {{ protocol | upper }} +{% endif %} {% endfor %} } {% endif %} diff --git a/interface-definitions/service_conntrack-sync.xml.in b/interface-definitions/service_conntrack-sync.xml.in index 088cd78f6..8d6b57183 100644 --- a/interface-definitions/service_conntrack-sync.xml.in +++ b/interface-definitions/service_conntrack-sync.xml.in @@ -12,26 +12,34 @@ Protocols for which local conntrack entries will be synced - tcp udp icmp sctp + tcp udp icmp icmp6 sctp dccp tcp - Sync Transmission Control Protocol conntrack entries + Sync Transmission Control Protocol entries udp - Sync User Datagram Protocol conntrack entries + Sync User Datagram Protocol entries icmp - Sync Internet Control Message Protocol conntrack entries + Sync Internet Control Message Protocol entries + + + icmp6 + Sync IPv6 Internet Control Message Protocol entries sctp - Sync Stream Control Transmission Protocol conntrack entries + Sync Stream Control Transmission Protocol entries + + + dccp + Sync Datagram Congestion Control Protocol entries - ^(tcp|udp|icmp|sctp)$ + ^(tcp|udp|icmp|icmp6|sctp|dccp)$ Allowed protocols: tcp udp icmp or sctp -- cgit v1.2.3