Signed-off-by: Alexey Dobriyan <adobriyan@parallels.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
int (*okfn)(struct sk_buff *))
{
return ip6t_do_table(skb, hook, in, out,
int (*okfn)(struct sk_buff *))
{
return ip6t_do_table(skb, hook, in, out,
- init_net.ipv6.ip6table_security);
+ nf_local_in_net(in, out)->ipv6.ip6table_security);
int (*okfn)(struct sk_buff *))
{
return ip6t_do_table(skb, hook, in, out,
int (*okfn)(struct sk_buff *))
{
return ip6t_do_table(skb, hook, in, out,
- init_net.ipv6.ip6table_security);
+ nf_forward_net(in, out)->ipv6.ip6table_security);
{
/* TBD: handle short packets via raw socket */
return ip6t_do_table(skb, hook, in, out,
{
/* TBD: handle short packets via raw socket */
return ip6t_do_table(skb, hook, in, out,
- init_net.ipv6.ip6table_security);
+ nf_local_out_net(in, out)->ipv6.ip6table_security);
}
static struct nf_hook_ops ip6t_ops[] __read_mostly = {
}
static struct nf_hook_ops ip6t_ops[] __read_mostly = {