]> err.no Git - linux-2.6/commit
[NETFILTER]: nat: avoid rerouting packets if only XFRM policy key changed
authorPatrick McHardy <kaber@trash.net>
Thu, 22 Mar 2007 19:30:29 +0000 (12:30 -0700)
committerDavid S. Miller <davem@davemloft.net>
Thu, 22 Mar 2007 19:30:29 +0000 (12:30 -0700)
commit848c29fd648e78fa87d0e399223826ce5dfc1b7a
treee76dac40d1d318f98bfdfe604ae43a29dec85ff9
parentca8fbb859c42c9a402c5c19fd0588d89ae4988ba
[NETFILTER]: nat: avoid rerouting packets if only XFRM policy key changed

Currently NAT not only reroutes packets in the OUTPUT chain when the
routing key changed, but also if only the non-routing part of the
IPsec policy key changed. This breaks ping -I since it doesn't use
SO_BINDTODEVICE but IP_PKTINFO cmsg to specify the output device, and
this information is lost.

Only do full rerouting if the routing key changed, and just do a new
policy lookup with the old route if only the ports changed.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/netfilter/ip_nat_standalone.c
net/ipv4/netfilter/nf_nat_standalone.c