From: Ben Greear Date: Thu, 22 Jul 2010 09:54:47 +0000 (+0000) Subject: net: dev_forward_skb should call nf_reset X-Git-Tag: v3.0~4197^2~2 X-Git-Url: http://review.tizen.org/git/?a=commitdiff_plain;h=c736eefadb71a01a5e61e0de700f28f6952b4444;p=platform%2Fkernel%2Flinux-amlogic.git net: dev_forward_skb should call nf_reset With conn-track zones and probably with different network namespaces, the netfilter logic needs to be re-calculated on packet receive. If the netfilter logic is not reset, it will not be recalculated properly. This patch adds the nf_reset logic to dev_forward_skb. Signed-off-by: Ben Greear Signed-off-by: David S. Miller --- diff --git a/net/core/dev.c b/net/core/dev.c index 0ea10f8..1f466e8 100644 --- a/net/core/dev.c +++ b/net/core/dev.c @@ -1488,6 +1488,7 @@ static inline void net_timestamp_check(struct sk_buff *skb) int dev_forward_skb(struct net_device *dev, struct sk_buff *skb) { skb_orphan(skb); + nf_reset(skb); if (!(dev->flags & IFF_UP) || (skb->len > (dev->mtu + dev->hard_header_len))) {