netfilter: nf_ct_helper: better logging for dropped packets

[cascardo/linux.git] / net / netfilter / nf_nat_amanda.c

diff --git a/net/netfilter/nf_nat_amanda.c b/net/netfilter/nf_nat_amanda.c
index 42d3378..3b67c9d 100644 (file)
--- a/net/netfilter/nf_nat_amanda.c
+++ b/net/netfilter/nf_nat_amanda.c
@@ -56,15 +56,19 @@ static unsigned int help(struct sk_buff *skb,
                }
        }
 
-       if (port == 0)
+       if (port == 0) {
+               nf_ct_helper_log(skb, exp->master, "all ports in use");
                return NF_DROP;
+       }
 
        sprintf(buffer, "%u", port);
        ret = nf_nat_mangle_udp_packet(skb, exp->master, ctinfo,
                                       protoff, matchoff, matchlen,
                                       buffer, strlen(buffer));
-       if (ret != NF_ACCEPT)
+       if (ret != NF_ACCEPT) {
+               nf_ct_helper_log(skb, exp->master, "cannot mangle packet");
                nf_ct_unexpect_related(exp);
+       }
        return ret;
 }