Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 9baa5c67 authored by Patrick McHardy's avatar Patrick McHardy Committed by David S. Miller
Browse files

[NETFILTER]: Don't exclude local packets from MASQUERADING 



Increases consistency in source-address selection.

Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent fb13ab28

net/ipv4/netfilter/ipt_MASQUERADE.c

+0 −5
Original line number Diff line number Diff line
@@ -86,11 +86,6 @@ masquerade_target(struct sk_buff **pskb, 


	IP_NF_ASSERT(hooknum == NF_IP_POST_ROUTING);



	/* FIXME: For the moment, don't do local packets, breaks

	   testsuite for 2.3.49 --RR */

	if ((*pskb)->sk)

		return NF_ACCEPT;



	ct = ip_conntrack_get(*pskb, &ctinfo);

	IP_NF_ASSERT(ct && (ctinfo == IP_CT_NEW || ctinfo == IP_CT_RELATED

	                    || ctinfo == IP_CT_RELATED + IP_CT_IS_REPLY));