diff options
| author | Patrick McHardy <kaber@trash.net> | 2006-01-06 23:05:36 -0800 |
|---|---|---|
| committer | David S. Miller <davem@sunset.davemloft.net> | 2006-01-07 12:57:35 -0800 |
| commit | 5c901daaea3be0d900b3ae1fc9b5f64ff94e4f02 (patch) | |
| tree | 7532b280d892bab7fd9af98b02a3f81929ddca5d /net/ipv4/xfrm4_output.c | |
| parent | 4e8e9de7c25315669e2d5565acc50ec379522c28 (diff) | |
| download | linux-stable-5c901daaea3be0d900b3ae1fc9b5f64ff94e4f02.tar.gz linux-stable-5c901daaea3be0d900b3ae1fc9b5f64ff94e4f02.tar.bz2 linux-stable-5c901daaea3be0d900b3ae1fc9b5f64ff94e4f02.zip | |
[NETFILTER]: Redo policy lookups after NAT when neccessary
When NAT changes the key used for the xfrm lookup it needs to be done
again. If a new policy is returned in POST_ROUTING the packet needs
to be passed to xfrm4_output_one manually after all hooks were called
because POST_ROUTING is called with fixed okfn (ip_finish_output).
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv4/xfrm4_output.c')
| -rw-r--r-- | net/ipv4/xfrm4_output.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/ipv4/xfrm4_output.c b/net/ipv4/xfrm4_output.c index 160c48800ab8..d4df0ddd424b 100644 --- a/net/ipv4/xfrm4_output.c +++ b/net/ipv4/xfrm4_output.c @@ -152,7 +152,7 @@ error_nolock: goto out_exit; } -static int xfrm4_output_finish(struct sk_buff *skb) +int xfrm4_output_finish(struct sk_buff *skb) { int err; |