]> git.baikalelectronics.ru Git - kernel.git/commit
ipvs: fix check on xmit to non-local addresses
authorJulian Anastasov <ja@ssi.bg>
Sat, 2 Jun 2018 18:52:15 +0000 (21:52 +0300)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 4 Jun 2018 16:28:47 +0000 (18:28 +0200)
commit8ce8b78e78b21746849446e2a35d2df153331a23
tree0b2f6bd5861ec829fb7ef9c599b5fe5ee124ccea
parente1d3c0f6e5d29427f6bcab80208ef469965ab47b
ipvs: fix check on xmit to non-local addresses

There is mistake in the rt_mode_allow_non_local assignment.
It should be used to check if sending to non-local addresses is
allowed, now it checks if local addresses are allowed.

As local addresses are allowed for most of the cases, the only
places that are affected are for traffic to transparent cache
servers:

- bypass connections when cache server is not available
- related ICMP in FORWARD hook when sent to cache server

Fixes: e23a65791018 ("ipvs: Pull out crosses_local_route_boundary logic")
Signed-off-by: Julian Anastasov <ja@ssi.bg>
Acked-by: Simon Horman <horms@verge.net.au>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/ipvs/ip_vs_xmit.c