]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 4349895) | patch
netfilter: nft_flow_offload: set liberal tracking mode for tcp
authorFlorian Westphal <fw@strlen.de>
Tue, 21 May 2019 11:24:31 +0000 (13:24 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 22 May 2019 08:51:49 +0000 (10:51 +0200)
commit3d04297424b82a9950f6bf648611af5a0d946b28
tree2ff2d6d7116bd5d0c3e90dd46f86382b86d6b8batree | snapshot
parent43498950df60eeeb2e35f36e0f5ccb48e0f724e0commit | diff
netfilter: nft_flow_offload: set liberal tracking mode for tcp

Without it, whenever a packet has to be pushed up the stack (e.g. because
of mtu mismatch), then conntrack will flag packets as invalid, which in
turn breaks NAT.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_flow_offload.c diff | blob | history
Linux Kernel Source Tree.