Commit f4a607bf authored Jul 07, 2007 by Jerome Borsboom Committed by David S. Miller Jul 10, 2007

[NETFILTER]: nf_nat_sip: only perform RTP DNAT if SIP session was SNATed



DNAT of the the RTP session is only necessary if the SIP session has
been SNATed.

Signed-off-by: Jerome Borsboom <j.borsboom@erasmusmc.nl>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

parent 7c4e36bc

net/ipv4/netfilter/nf_nat_sip.c

+5 −1

Original line number	Diff line number	Diff line
		@@ -260,6 +260,10 @@ static unsigned int ip_nat_sdp(struct sk_buff **pskb,
		DEBUGP("ip_nat_sdp():\n");

		/* Connection will come from reply */
		if (ct->tuplehash[dir].tuple.src.u3.ip ==
		ct->tuplehash[!dir].tuple.dst.u3.ip)
		newip = exp->tuple.dst.u3.ip;
		else
		newip = ct->tuplehash[!dir].tuple.dst.u3.ip;

		exp->saved_ip = exp->tuple.dst.u3.ip;