]> git.proxmox.com Git - mirror_ubuntu-eoan-kernel.git/commit
projects / mirror_ubuntu-eoan-kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: e75b3e1) | patch
netfilter: nft_flow_offload: set liberal tracking mode for tcp
authorFlorian Westphal <fw@strlen.de>
Tue, 21 May 2019 11:24:31 +0000 (13:24 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 22 May 2019 08:51:49 +0000 (10:51 +0200)
commit8437a6209f76f85a2db1abb12a9bde2170801617
tree2ff2d6d7116bd5d0c3e90dd46f86382b86d6b8batree
parente75b3e1c9bc5b997d09bdf8eb72ab3dd3c1a7072commit | diff
netfilter: nft_flow_offload: set liberal tracking mode for tcp

Without it, whenever a packet has to be pushed up the stack (e.g. because
of mtu mismatch), then conntrack will flag packets as invalid, which in
turn breaks NAT.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_flow_offload.c diff | blob | blame | history
Ubuntu Eoan Linux kernel mirror