Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit df1e2025 authored by Felix Fietkau's avatar Felix Fietkau Committed by Pablo Neira Ayuso
Browse files

netfilter: nf_flow_table: fix offloading connections with SNAT+DNAT 



Pass all NAT types to the flow offload struct, otherwise parts of the
address/port pair do not get translated properly, causing connection
stalls

Signed-off-by: default avatarFelix Fietkau <nbd@nbd.name>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 33894c36

net/netfilter/nf_flow_table_core.c

+1 −1
Original line number Diff line number Diff line
@@ -84,7 +84,7 @@ flow_offload_alloc(struct nf_conn *ct, struct nf_flow_route *route) 


	if (ct->status & IPS_SRC_NAT)

		flow->flags |= FLOW_OFFLOAD_SNAT;

	else if (ct->status & IPS_DST_NAT)

	if (ct->status & IPS_DST_NAT)

		flow->flags |= FLOW_OFFLOAD_DNAT;



	return flow;