diff options
| author | Andrew Collins <bsderandrew@gmail.com> | 2012-12-12 14:23:49 +0000 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2012-12-16 23:28:30 +0100 |
| commit | c65ef8dc7b1c16379b9fc29e925716a10804af43 (patch) | |
| tree | 52c8c66e995ea0c8e115a137163be2090561dd3c /crypto | |
| parent | c6f408996c625cb950cad024f90e50519f94713c (diff) | |
| download | linux-c65ef8dc7b1c16379b9fc29e925716a10804af43.tar.bz2 | |
netfilter: nf_nat: Also handle non-ESTABLISHED routing changes in MASQUERADE
Since (a0ecb85 netfilter: nf_nat: Handle routing changes in MASQUERADE
target), the MASQUERADE target handles routing changes which affect
the output interface of a connection, but only for ESTABLISHED
connections. It is also possible for NEW connections which
already have a conntrack entry to be affected by routing changes.
This adds a check to drop entries in the NEW+conntrack state
when the oif has changed.
Signed-off-by: Andrew Collins <bsderandrew@gmail.com>
Acked-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'crypto')
0 files changed, 0 insertions, 0 deletions