]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3ca72ca) | patch
netfilter: nft_flow_offload: set liberal tracking mode for tcp
authorFlorian Westphal <fw@strlen.de>
Tue, 21 May 2019 11:24:31 +0000 (13:24 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 22 May 2019 08:51:49 +0000 (10:51 +0200)
commitdd9e19463742afb8c2088ac8deaa5897c18e298e
tree2ff2d6d7116bd5d0c3e90dd46f86382b86d6b8batree | snapshot
parent3ca72caa405c5b71a9a34281c05ae1f2078b9dd1commit | diff
netfilter: nft_flow_offload: set liberal tracking mode for tcp

Without it, whenever a packet has to be pushed up the stack (e.g. because
of mtu mismatch), then conntrack will flag packets as invalid, which in
turn breaks NAT.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_flow_offload.c diff | blob | history
Linux Kernel Source Tree.