[NETFILTER]: Don't exclude local packets from MASQUERADING
Increases consistency in source-address selection. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
fb13ab2849
commit
9baa5c67ff
|
@ -86,11 +86,6 @@ masquerade_target(struct sk_buff **pskb,
|
|||
|
||||
IP_NF_ASSERT(hooknum == NF_IP_POST_ROUTING);
|
||||
|
||||
/* FIXME: For the moment, don't do local packets, breaks
|
||||
testsuite for 2.3.49 --RR */
|
||||
if ((*pskb)->sk)
|
||||
return NF_ACCEPT;
|
||||
|
||||
ct = ip_conntrack_get(*pskb, &ctinfo);
|
||||
IP_NF_ASSERT(ct && (ctinfo == IP_CT_NEW || ctinfo == IP_CT_RELATED
|
||||
|| ctinfo == IP_CT_RELATED + IP_CT_IS_REPLY));
|
||||
|
|
Loading…
Reference in New Issue