Revision 13c62f5371e3eb4fc3400cfa26e64ca75f888008 authored by Marcelo Ricardo Leitner on 09 June 2021, 14:23:56 UTC, committed by David S. Miller on 09 June 2021, 22:34:51 UTC
This this the counterpart of 8aa7b526dc0b ("openvswitch: handle DNAT
tuple collision") for act_ct. From that commit changelog:
"""
With multiple DNAT rules it's possible that after destination
translation the resulting tuples collide.
...
Netfilter handles this case by allocating a null binding for SNAT at
egress by default. Perform the same operation in openvswitch for DNAT
if no explicit SNAT is requested by the user and allocate a null binding
for SNAT for packets in the "original" direction.
"""
Fixes: 95219afbb980 ("act_ct: support asymmetric conntrack")
Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
1 parent d2e381c
| File | Mode | Size |
|---|---|---|
| apparmor | ||
| bpf | ||
| integrity | ||
| keys | ||
| landlock | ||
| loadpin | ||
| lockdown | ||
| safesetid | ||
| selinux | ||
| smack | ||
| tomoyo | ||
| yama | ||
| Kconfig | -rw-r--r-- | 10.8 KB |
| Kconfig.hardening | -rw-r--r-- | 8.8 KB |
| Makefile | -rw-r--r-- | 1.4 KB |
| commoncap.c | -rw-r--r-- | 42.8 KB |
| device_cgroup.c | -rw-r--r-- | 21.1 KB |
| inode.c | -rw-r--r-- | 10.6 KB |
| lsm_audit.c | -rw-r--r-- | 10.9 KB |
| min_addr.c | -rw-r--r-- | 1.3 KB |
| security.c | -rw-r--r-- | 65.6 KB |
Computing file changes ...
