Patrick McHardy 848c29fd64 [NETFILTER]: nat: avoid rerouting packets if only XFRM policy key changed
Currently NAT not only reroutes packets in the OUTPUT chain when the
routing key changed, but also if only the non-routing part of the
IPsec policy key changed. This breaks ping -I since it doesn't use
SO_BINDTODEVICE but IP_PKTINFO cmsg to specify the output device, and
this information is lost.

Only do full rerouting if the routing key changed, and just do a new
policy lookup with the old route if only the ports changed.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-03-22 12:30:29 -07:00
..
2007-02-10 23:19:39 -08:00
2007-02-10 23:19:39 -08:00
2007-02-10 23:19:39 -08:00
2007-02-10 23:19:39 -08:00
2006-09-28 18:02:23 -07:00
2007-02-10 23:19:39 -08:00
2007-02-10 23:19:39 -08:00
2007-02-10 23:19:39 -08:00
2007-02-10 23:19:39 -08:00
2005-04-16 15:20:36 -07:00
2007-02-10 23:19:39 -08:00
2006-09-22 15:18:04 -07:00
2007-02-17 19:07:33 +01:00
2007-02-12 13:34:03 -08:00
2007-02-10 23:19:39 -08:00
2007-02-10 23:19:39 -08:00
2006-09-28 18:03:07 -07:00
2007-02-10 23:19:39 -08:00
2007-02-10 23:19:39 -08:00
2007-03-16 15:04:03 -07:00
2007-02-10 23:19:39 -08:00
2007-03-07 16:08:04 -08:00
2006-12-02 21:31:51 -08:00
2006-10-04 00:31:09 -07:00