Commit c736eefa authored Jul 22, 2010 by Ben Greear Committed by David S. Miller Jul 25, 2010

net: dev_forward_skb should call nf_reset



With conn-track zones and probably with different network
namespaces, the netfilter logic needs to be re-calculated
on packet receive.  If the netfilter logic is not reset,
it will not be recalculated properly.  This patch adds
the nf_reset logic to dev_forward_skb.

Signed-off-by: Ben Greear <greearb@candelatech.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent 3b87956e

net/core/dev.c

+1 −0

Original line number	Diff line number	Diff line
		@@ -1488,6 +1488,7 @@ static inline void net_timestamp_check(struct sk_buff *skb)
		int dev_forward_skb(struct net_device dev, struct sk_buff skb)
		{
		skb_orphan(skb);
		nf_reset(skb);

		if (!(dev->flags & IFF_UP) \|\|
		(skb->len > (dev->mtu + dev->hard_header_len))) {