diff options
| author | KOVACS Krisztian <hidden@sch.bme.hu> | 2008-10-01 07:44:42 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2008-10-01 07:44:42 -0700 |
| commit | 86b08d867d7de001ab224180ed7865fab93fd56e (patch) | |
| tree | fc081a9ec0d0107f951cc0270da2865e1e3413e2 /include/net | |
| parent | 88ef4a5a78e63420dd1dd770f1bd1dc198926b04 (diff) | |
| download | linux-stable-86b08d867d7de001ab224180ed7865fab93fd56e.tar.gz linux-stable-86b08d867d7de001ab224180ed7865fab93fd56e.tar.bz2 linux-stable-86b08d867d7de001ab224180ed7865fab93fd56e.zip | |
ipv4: Make Netfilter's ip_route_me_harder() non-local address compatible
Netfilter's ip_route_me_harder() tries to re-route packets either
generated or re-routed by Netfilter. This patch changes
ip_route_me_harder() to handle packets from non-locally-bound sockets
with IP_TRANSPARENT set as local and to set the appropriate flowi
flags when re-doing the routing lookup.
Signed-off-by: KOVACS Krisztian <hidden@sch.bme.hu>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include/net')
| -rw-r--r-- | include/net/ip.h | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/include/net/ip.h b/include/net/ip.h index 90b27f634b76..d678ea3d474a 100644 --- a/include/net/ip.h +++ b/include/net/ip.h @@ -29,6 +29,7 @@ #include <net/inet_sock.h> #include <net/snmp.h> +#include <net/flow.h> struct sock; @@ -149,6 +150,11 @@ struct ip_reply_arg { #define IP_REPLY_ARG_NOSRCCHECK 1 +static inline __u8 ip_reply_arg_flowi_flags(const struct ip_reply_arg *arg) +{ + return (arg->flags & IP_REPLY_ARG_NOSRCCHECK) ? FLOWI_FLAG_ANYSRC : 0; +} + void ip_send_reply(struct sock *sk, struct sk_buff *skb, struct ip_reply_arg *arg, unsigned int len); |