Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit eb90b0c7 authored by Julian Anastasov's avatar Julian Anastasov Committed by Simon Horman
Browse files

ipvs: fix ipv6 hook registration for local replies 

commit fc604767
("ipvs: changes for local real server") from 2.6.37
introduced DNAT support to local real server but the
IPv6 LOCAL_OUT handler ip_vs_local_reply6() is
registered incorrectly as IPv4 hook causing any outgoing
IPv4 traffic to be dropped depending on the IP header values.

Chris tracked down the problem to CONFIG_IP_VS_IPV6=y
Bug report: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1349768



Reported-by: default avatarChris J Arges <chris.j.arges@canonical.com>
Tested-by: default avatarChris J Arges <chris.j.arges@canonical.com>
Signed-off-by: default avatarJulian Anastasov <ja@ssi.bg>
Signed-off-by: default avatarSimon Horman <horms@verge.net.au>
parent ea1d5d77

net/netfilter/ipvs/ip_vs_core.c

+1 −1
Original line number Diff line number Diff line
@@ -1906,7 +1906,7 @@ static struct nf_hook_ops ip_vs_ops[] __read_mostly = { 
	{

		.hook		= ip_vs_local_reply6,

		.owner		= THIS_MODULE,

		.pf		= NFPROTO_IPV4,

		.pf		= NFPROTO_IPV6,

		.hooknum	= NF_INET_LOCAL_OUT,

		.priority	= NF_IP6_PRI_NAT_DST + 1,

	},