Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 88a6f4ad authored by Patrick McHardy's avatar Patrick McHardy Committed by David S. Miller
Browse files

netfilter: ip6table_mangle: don't reroute in LOCAL_IN 



Rerouting should only happen in LOCAL_OUT, in INPUT its useless
since the packet has already chosen its final destination.

Noticed by Alexey Dobriyan <adobriyan@gmail.com>.

Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent b9f75f45

net/ipv6/netfilter/ip6table_mangle.c

+1 −1
Original line number Original line Diff line number Diff line
@@ -129,7 +129,7 @@ static struct nf_hook_ops ip6t_ops[] __read_mostly = { 
		.priority	= NF_IP6_PRI_MANGLE,

		.priority	= NF_IP6_PRI_MANGLE,

	},

	},

	{

	{

		.hook		= ip6t_local_hook,

		.hook		= ip6t_route_hook,

		.owner		= THIS_MODULE,

		.owner		= THIS_MODULE,

		.pf		= PF_INET6,

		.pf		= PF_INET6,

		.hooknum	= NF_INET_LOCAL_IN,

		.hooknum	= NF_INET_LOCAL_IN,