diff options
| author | Patrick McHardy <kaber@trash.net> | 2008-06-24 22:30:45 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2008-06-24 22:30:45 +0200 |
| commit | 88a6f4ad76be425f47df7f892baf913bcd466fb3 (patch) | |
| tree | 105b5d30f1dd6bb931acf5dc14b6c186c3108acf /net | |
| parent | netns: Don't receive new packets in a dead network namespace. (diff) | |
| download | linux-88a6f4ad76be425f47df7f892baf913bcd466fb3.tar.xz linux-88a6f4ad76be425f47df7f892baf913bcd466fb3.zip | |
netfilter: ip6table_mangle: don't reroute in LOCAL_IN
Rerouting should only happen in LOCAL_OUT, in INPUT its useless
since the packet has already chosen its final destination.
Noticed by Alexey Dobriyan <adobriyan@gmail.com>.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
| -rw-r--r-- | net/ipv6/netfilter/ip6table_mangle.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/ipv6/netfilter/ip6table_mangle.c b/net/ipv6/netfilter/ip6table_mangle.c index 27a5e8b48d93..f405cea21a8b 100644 --- a/net/ipv6/netfilter/ip6table_mangle.c +++ b/net/ipv6/netfilter/ip6table_mangle.c @@ -129,7 +129,7 @@ static struct nf_hook_ops ip6t_ops[] __read_mostly = { .priority = NF_IP6_PRI_MANGLE, }, { - .hook = ip6t_local_hook, + .hook = ip6t_route_hook, .owner = THIS_MODULE, .pf = PF_INET6, .hooknum = NF_INET_LOCAL_IN, |