mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-10-03 15:47:36 +00:00
netfilter: nf_flow_table: fix offloading connections with SNAT+DNAT
Pass all NAT types to the flow offload struct, otherwise parts of the address/port pair do not get translated properly, causing connection stalls Signed-off-by: Felix Fietkau <nbd@nbd.name> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:
parent
33894c367d
commit
df1e202531
1 changed files with 1 additions and 1 deletions
|
@ -84,7 +84,7 @@ flow_offload_alloc(struct nf_conn *ct, struct nf_flow_route *route)
|
||||||
|
|
||||||
if (ct->status & IPS_SRC_NAT)
|
if (ct->status & IPS_SRC_NAT)
|
||||||
flow->flags |= FLOW_OFFLOAD_SNAT;
|
flow->flags |= FLOW_OFFLOAD_SNAT;
|
||||||
else if (ct->status & IPS_DST_NAT)
|
if (ct->status & IPS_DST_NAT)
|
||||||
flow->flags |= FLOW_OFFLOAD_DNAT;
|
flow->flags |= FLOW_OFFLOAD_DNAT;
|
||||||
|
|
||||||
return flow;
|
return flow;
|
||||||
|
|
Loading…
Reference in a new issue