projects / platform / kernel / linux-rpi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 3b2734b) | patch
netfilter: nft_flow_offload: set liberal tracking mode for tcp
authorFlorian Westphal <fw@strlen.de>
Tue, 21 May 2019 11:24:31 +0000 (13:24 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 10 Jul 2019 07:53:30 +0000 (09:53 +0200)
commit48f611ecea0e67ba2065074e2c0f20bfcb860f85
treeb1d1c79864c193137e5cb63ad3507198052b046ctree | snapshot
parent3b2734bc839d188e44934f5f2f4fe9a487bdaa47commit | diff
netfilter: nft_flow_offload: set liberal tracking mode for tcp

commit 8437a6209f76f85a2db1abb12a9bde2170801617 upstream.

Without it, whenever a packet has to be pushed up the stack (e.g. because
of mtu mismatch), then conntrack will flag packets as invalid, which in
turn breaks NAT.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nft_flow_offload.c diff | blob | history
Domain: System / Kernel;