Linux kernel mirror (for testing) git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
kernel os linux

netfilter: ip6table_mangle: don't reroute in LOCAL_IN

Rerouting should only happen in LOCAL_OUT, in INPUT its useless
since the packet has already chosen its final destination.

Noticed by Alexey Dobriyan <adobriyan@gmail.com>.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

authored by

Patrick McHardy and committed by
David S. Miller
88a6f4ad b9f75f45

+1 -1
+1 -1
net/ipv6/netfilter/ip6table_mangle.c
··· 129 129 .priority = NF_IP6_PRI_MANGLE, 130 130 }, 131 131 { 132 - .hook = ip6t_local_hook, 132 + .hook = ip6t_route_hook, 133 133 .owner = THIS_MODULE, 134 134 .pf = PF_INET6, 135 135 .hooknum = NF_INET_LOCAL_IN,