]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: cb8de17) | patch
[NETFILTER]: Redo policy lookups after NAT when neccessary
authorPatrick McHardy <kaber@trash.net>
Sat, 7 Jan 2006 07:05:36 +0000 (23:05 -0800)
committerDavid S. Miller <davem@sunset.davemloft.net>
Sat, 7 Jan 2006 20:57:35 +0000 (12:57 -0800)
commit2e2cb3a514689a59cca4e4dda4245e5143630877
tree7532b280d892bab7fd9af98b02a3f81929ddca5dtree | snapshot
parentcb8de1725e5995c970358041eccc2287b54782b7commit | diff
[NETFILTER]: Redo policy lookups after NAT when neccessary

When NAT changes the key used for the xfrm lookup it needs to be done
again. If a new policy is returned in POST_ROUTING the packet needs
to be passed to xfrm4_output_one manually after all hooks were called
because POST_ROUTING is called with fixed okfn (ip_finish_output).

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/net/xfrm.h diff | blob | history
net/ipv4/ip_output.c diff | blob | history
net/ipv4/netfilter/ip_nat_standalone.c diff | blob | history
net/ipv4/xfrm4_output.c diff | blob | history
Linux Kernel Source Tree.