]> git.karo-electronics.de Git - linux-beck.git/commit
net: vrf: Fix NAT within a VRF
authorDavid Ahern <dsa@cumulusnetworks.com>
Wed, 14 Dec 2016 19:06:18 +0000 (11:06 -0800)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Sun, 15 Jan 2017 12:42:52 +0000 (13:42 +0100)
commitd4a0b2e40c46898a307e37a857f623c3d884b1fe
tree68c4ba6016a7586d9cbe0e4130ab0bedda7e1fa7
parent584fd7872c1bc29d3b752bebb6a5b470018f83e8
net: vrf: Fix NAT within a VRF

[ Upstream commit a0f37efa82253994b99623dbf41eea8dd0ba169b ]

Connection tracking with VRF is broken because the pass through the VRF
device drops the connection tracking info. Removing the call to nf_reset
allows DNAT and MASQUERADE to work across interfaces within a VRF.

Fixes: 73e20b761acf ("net: vrf: Add support for PREROUTING rules on vrf device")
Signed-off-by: David Ahern <dsa@cumulusnetworks.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
drivers/net/vrf.c