Cc: stable
On 2025/5/28 19:42, Lance Yang wrote:
Thanks for taking the time to review!
On 2025/5/28 19:05, Florian Westphal wrote:
Lance Yang ioworker0@gmail.com wrote:
From: Lance Yang lance.yang@linux.dev
When no logger is registered, nf_conntrack_log_invalid fails to log invalid packets, leaving users unaware of actual invalid traffic. Improve this by loading nf_log_syslog, similar to how 'iptables -I FORWARD 1 -m conntrack --ctstate INVALID -j LOG' triggers it.
Acked-by: Florian Westphal fw@strlen.de
Hmm... should this patch be backported to stable kernels? Without it, nf_conntrack_log_invalid won't log invalid packets when no logger is registered, causing unnecessary debugging effort ;)
Back then, I actually thought my machine wasn't seeing any invalid packets... turns out they just weren't logged in dmesg :(
Thanks, Lance