diff options
author | Xin Long <lucien.xin@gmail.com> | 2022-12-08 17:56:11 +0100 |
---|---|---|
committer | David S. Miller <davem@davemloft.net> | 2022-12-12 11:14:03 +0100 |
commit | 0564c3e51bc7bb200e76d0cad2d7067cc77cb83e (patch) | |
tree | f366544f8671e7172040614a6ebebabd592da840 /net | |
parent | openvswitch: return NF_DROP when fails to add nat ext in ovs_ct_nat (diff) | |
download | linux-0564c3e51bc7bb200e76d0cad2d7067cc77cb83e.tar.xz linux-0564c3e51bc7bb200e76d0cad2d7067cc77cb83e.zip |
net: sched: update the nat flag for icmp error packets in ct_nat_execute
In ovs_ct_nat_execute(), the packet flow key nat flags are updated
when it processes ICMP(v6) error packets translation successfully.
In ct_nat_execute() when processing ICMP(v6) error packets translation
successfully, it should have done the same in ct_nat_execute() to set
post_ct_s/dnat flag, which will be used to update flow key nat flags
in OVS module later.
Reviewed-by: Saeed Mahameed <saeed@kernel.org>
Signed-off-by: Xin Long <lucien.xin@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net')
-rw-r--r-- | net/sched/act_ct.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/sched/act_ct.c b/net/sched/act_ct.c index f6df0168c91f..eac4e07eb56b 100644 --- a/net/sched/act_ct.c +++ b/net/sched/act_ct.c @@ -937,13 +937,13 @@ static int ct_nat_execute(struct sk_buff *skb, struct nf_conn *ct, } err = nf_nat_packet(ct, ctinfo, hooknum, skb); +out: if (err == NF_ACCEPT) { if (maniptype == NF_NAT_MANIP_SRC) tc_skb_cb(skb)->post_ct_snat = 1; if (maniptype == NF_NAT_MANIP_DST) tc_skb_cb(skb)->post_ct_dnat = 1; } -out: return err; } #endif /* CONFIG_NF_NAT */ |