summaryrefslogtreecommitdiffstats
path: root/net/sched/act_ct.c
diff options
context:
space:
mode:
authorXin Long <lucien.xin@gmail.com>2022-12-08 17:56:11 +0100
committerDavid S. Miller <davem@davemloft.net>2022-12-12 11:14:03 +0100
commit0564c3e51bc7bb200e76d0cad2d7067cc77cb83e (patch)
treef366544f8671e7172040614a6ebebabd592da840 /net/sched/act_ct.c
parentopenvswitch: return NF_DROP when fails to add nat ext in ovs_ct_nat (diff)
downloadlinux-0564c3e51bc7bb200e76d0cad2d7067cc77cb83e.tar.xz
linux-0564c3e51bc7bb200e76d0cad2d7067cc77cb83e.zip
net: sched: update the nat flag for icmp error packets in ct_nat_execute
In ovs_ct_nat_execute(), the packet flow key nat flags are updated when it processes ICMP(v6) error packets translation successfully. In ct_nat_execute() when processing ICMP(v6) error packets translation successfully, it should have done the same in ct_nat_execute() to set post_ct_s/dnat flag, which will be used to update flow key nat flags in OVS module later. Reviewed-by: Saeed Mahameed <saeed@kernel.org> Signed-off-by: Xin Long <lucien.xin@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/sched/act_ct.c')
-rw-r--r--net/sched/act_ct.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/sched/act_ct.c b/net/sched/act_ct.c
index f6df0168c91f..eac4e07eb56b 100644
--- a/net/sched/act_ct.c
+++ b/net/sched/act_ct.c
@@ -937,13 +937,13 @@ static int ct_nat_execute(struct sk_buff *skb, struct nf_conn *ct,
}
err = nf_nat_packet(ct, ctinfo, hooknum, skb);
+out:
if (err == NF_ACCEPT) {
if (maniptype == NF_NAT_MANIP_SRC)
tc_skb_cb(skb)->post_ct_snat = 1;
if (maniptype == NF_NAT_MANIP_DST)
tc_skb_cb(skb)->post_ct_dnat = 1;
}
-out:
return err;
}
#endif /* CONFIG_NF_NAT */