Revision 07998281c268592963e1cd623fe6ab0270b65ae4 authored by Florian Westphal on 05 February 2021, 11:56:43 UTC, committed by Pablo Neira Ayuso on 08 February 2021, 23:04:14 UTC
The origin skip check needs to re-test the zone. Else, we might skip
a colliding tuple in the reply direction.
This only occurs when using 'directional zones' where origin tuples
reside in different zones but the reply tuples share the same zone.
This causes the new conntrack entry to be dropped at confirmation time
because NAT clash resolution was elided.
Fixes: 4e35c1cb9460240 ("netfilter: nf_nat: skip nat clash resolution for same-origin entries")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
1 parent ce7536b
| File | Mode | Size |
|---|---|---|
| tests | ||
| Kconfig | -rw-r--r-- | 3.3 KB |
| Makefile | -rw-r--r-- | 1.1 KB |
| acl.c | -rw-r--r-- | 3.1 KB |
| async-thread.c | -rw-r--r-- | 10.3 KB |
| async-thread.h | -rw-r--r-- | 1.6 KB |
| backref.c | -rw-r--r-- | 82.6 KB |
| backref.h | -rw-r--r-- | 10.4 KB |
| block-group.c | -rw-r--r-- | 95.9 KB |
| block-group.h | -rw-r--r-- | 10.0 KB |
| block-rsv.c | -rw-r--r-- | 16.2 KB |
| block-rsv.h | -rw-r--r-- | 3.1 KB |
| btrfs_inode.h | -rw-r--r-- | 10.2 KB |
| check-integrity.c | -rw-r--r-- | 88.9 KB |
| check-integrity.h | -rw-r--r-- | 599 bytes |
| compression.c | -rw-r--r-- | 43.8 KB |
| compression.h | -rw-r--r-- | 6.0 KB |
| ctree.c | -rw-r--r-- | 141.8 KB |
| ctree.h | -rw-r--r-- | 125.9 KB |
| delalloc-space.c | -rw-r--r-- | 16.6 KB |
| delalloc-space.h | -rw-r--r-- | 950 bytes |
| delayed-inode.c | -rw-r--r-- | 51.6 KB |
| delayed-inode.h | -rw-r--r-- | 4.3 KB |
| delayed-ref.c | -rw-r--r-- | 32.4 KB |
| delayed-ref.h | -rw-r--r-- | 10.9 KB |
| dev-replace.c | -rw-r--r-- | 34.5 KB |
| dev-replace.h | -rw-r--r-- | 835 bytes |
| dir-item.c | -rw-r--r-- | 11.3 KB |
| discard.c | -rw-r--r-- | 22.9 KB |
| discard.h | -rw-r--r-- | 1.4 KB |
| disk-io.c | -rw-r--r-- | 132.8 KB |
| disk-io.h | -rw-r--r-- | 5.5 KB |
| export.c | -rw-r--r-- | 7.1 KB |
| export.h | -rw-r--r-- | 533 bytes |
| extent-io-tree.h | -rw-r--r-- | 8.8 KB |
| extent-tree.c | -rw-r--r-- | 159.2 KB |
| extent_io.c | -rw-r--r-- | 161.7 KB |
| extent_io.h | -rw-r--r-- | 10.5 KB |
| extent_map.c | -rw-r--r-- | 17.2 KB |
| extent_map.h | -rw-r--r-- | 2.7 KB |
| file-item.c | -rw-r--r-- | 33.8 KB |
| file.c | -rw-r--r-- | 98.8 KB |
| free-space-cache.c | -rw-r--r-- | 104.4 KB |
| free-space-cache.h | -rw-r--r-- | 5.1 KB |
| free-space-tree.c | -rw-r--r-- | 39.5 KB |
| free-space-tree.h | -rw-r--r-- | 2.1 KB |
| inode-item.c | -rw-r--r-- | 11.0 KB |
| inode.c | -rw-r--r-- | 289.2 KB |
| ioctl.c | -rw-r--r-- | 121.7 KB |
| locking.c | -rw-r--r-- | 6.6 KB |
| locking.h | -rw-r--r-- | 4.3 KB |
| lzo.c | -rw-r--r-- | 11.6 KB |
| misc.h | -rw-r--r-- | 2.4 KB |
| ordered-data.c | -rw-r--r-- | 25.0 KB |
| ordered-data.h | -rw-r--r-- | 5.8 KB |
| orphan.c | -rw-r--r-- | 1.1 KB |
| print-tree.c | -rw-r--r-- | 12.2 KB |
| print-tree.h | -rw-r--r-- | 456 bytes |
| props.c | -rw-r--r-- | 10.0 KB |
| props.h | -rw-r--r-- | 800 bytes |
| qgroup.c | -rw-r--r-- | 109.3 KB |
| qgroup.h | -rw-r--r-- | 14.0 KB |
| raid56.c | -rw-r--r-- | 66.9 KB |
| raid56.h | -rw-r--r-- | 1.7 KB |
| rcu-string.h | -rw-r--r-- | 997 bytes |
| reada.c | -rw-r--r-- | 26.8 KB |
| ref-verify.c | -rw-r--r-- | 24.8 KB |
| ref-verify.h | -rw-r--r-- | 1.1 KB |
| reflink.c | -rw-r--r-- | 24.7 KB |
| reflink.h | -rw-r--r-- | 305 bytes |
| relocation.c | -rw-r--r-- | 99.1 KB |
| root-tree.c | -rw-r--r-- | 13.9 KB |
| scrub.c | -rw-r--r-- | 109.2 KB |
| send.c | -rw-r--r-- | 181.6 KB |
| send.h | -rw-r--r-- | 2.3 KB |
| space-info.c | -rw-r--r-- | 45.8 KB |
| space-info.h | -rw-r--r-- | 5.1 KB |
| struct-funcs.c | -rw-r--r-- | 6.1 KB |
| super.c | -rw-r--r-- | 72.0 KB |
| sysfs.c | -rw-r--r-- | 50.5 KB |
| sysfs.h | -rw-r--r-- | 1.6 KB |
| transaction.c | -rw-r--r-- | 69.0 KB |
| transaction.h | -rw-r--r-- | 7.6 KB |
| tree-checker.c | -rw-r--r-- | 53.4 KB |
| tree-checker.h | -rw-r--r-- | 702 bytes |
| tree-defrag.c | -rw-r--r-- | 3.5 KB |
| tree-log.c | -rw-r--r-- | 173.4 KB |
| tree-log.h | -rw-r--r-- | 2.8 KB |
| ulist.c | -rw-r--r-- | 6.7 KB |
| ulist.h | -rw-r--r-- | 1.9 KB |
| uuid-tree.c | -rw-r--r-- | 8.4 KB |
| volumes.c | -rw-r--r-- | 206.3 KB |
| volumes.h | -rw-r--r-- | 17.1 KB |
| xattr.c | -rw-r--r-- | 12.3 KB |
| xattr.h | -rw-r--r-- | 804 bytes |
| zlib.c | -rw-r--r-- | 11.8 KB |
| zoned.c | -rw-r--r-- | 15.2 KB |
| zoned.h | -rw-r--r-- | 4.2 KB |
| zstd.c | -rw-r--r-- | 18.5 KB |
Computing file changes ...
