diff options
author | Florian Westphal <fw@strlen.de> | 2017-04-20 10:11:35 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2017-04-26 09:30:22 +0200 |
commit | 9a08ecfe74d7796ddc92ec312d3b7eaeba5a7c22 (patch) | |
tree | 2a9fa3c6cb2122050ee531d019d7c9fde52bd28a /net/netfilter/nf_nat_core.c | |
parent | 2fe7c321ab54d391dffb98911f5fb5cd315d6526 (diff) | |
download | linux-stable-9a08ecfe74d7796ddc92ec312d3b7eaeba5a7c22.tar.gz linux-stable-9a08ecfe74d7796ddc92ec312d3b7eaeba5a7c22.tar.bz2 linux-stable-9a08ecfe74d7796ddc92ec312d3b7eaeba5a7c22.zip |
netfilter: don't attach a nat extension by default
nowadays the NAT extension only stores the interface index
(used to purge connections that got masqueraded when interface goes down)
and pptp nat information.
Previous patches moved nf_ct_nat_ext_add to those places that need it.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nf_nat_core.c')
-rw-r--r-- | net/netfilter/nf_nat_core.c | 6 |
1 files changed, 0 insertions, 6 deletions
diff --git a/net/netfilter/nf_nat_core.c b/net/netfilter/nf_nat_core.c index 86eeacbb4793..ec9e6d8101b9 100644 --- a/net/netfilter/nf_nat_core.c +++ b/net/netfilter/nf_nat_core.c @@ -408,12 +408,6 @@ nf_nat_setup_info(struct nf_conn *ct, enum nf_nat_manip_type maniptype) { struct nf_conntrack_tuple curr_tuple, new_tuple; - struct nf_conn_nat *nat; - - /* nat helper or nfctnetlink also setup binding */ - nat = nf_ct_nat_ext_add(ct); - if (nat == NULL) - return NF_ACCEPT; NF_CT_ASSERT(maniptype == NF_NAT_MANIP_SRC || maniptype == NF_NAT_MANIP_DST); |