Patrick McHardy 848c29fd64 [NETFILTER]: nat: avoid rerouting packets if only XFRM policy key changed
Currently NAT not only reroutes packets in the OUTPUT chain when the
routing key changed, but also if only the non-routing part of the
IPsec policy key changed. This breaks ping -I since it doesn't use
SO_BINDTODEVICE but IP_PKTINFO cmsg to specify the output device, and
this information is lost.

Only do full rerouting if the routing key changed, and just do a new
policy lookup with the old route if only the ports changed.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-03-22 12:30:29 -07:00
..
2007-03-02 20:44:51 -08:00
2007-03-22 12:27:49 -07:00
2007-03-22 12:27:49 -07:00
2007-03-22 12:27:49 -07:00
2007-02-28 09:42:06 -08:00
2007-02-08 13:51:54 -08:00
2007-02-28 09:42:14 -08:00
2007-03-22 12:27:49 -07:00
2007-02-10 23:20:15 -08:00
2007-03-22 12:27:49 -07:00
2007-02-17 21:30:15 -05:00
2005-04-16 15:20:36 -07:00