Attached is a single fix for 2.6.26 that corrects the LOCAL_IN
hook function in ip6table_mangle. Please apply, thanks.
commit 0a9d392f66ab6d4bf0efbfa1b22330548b931498
Author: Patrick McHardy <kaber@xxxxxxxxx>
Date: Tue Jun 24 13:58:23 2008 +0200
netfilter: ip6table_mangle: don't reroute in LOCAL_IN
Rerouting should only happen in LOCAL_OUT, in INPUT its useless
since the packet has already chosen its final destination.
Noticed by Alexey Dobriyan <adobriyan@xxxxxxxxx>.
Signed-off-by: Patrick McHardy <kaber@xxxxxxxxx>
diff --git a/net/ipv6/netfilter/ip6table_mangle.c b/net/ipv6/netfilter/ip6table_mangle.c
index 27a5e8b..f405cea 100644
--- a/net/ipv6/netfilter/ip6table_mangle.c
+++ b/net/ipv6/netfilter/ip6table_mangle.c
@@ -129,7 +129,7 @@ static struct nf_hook_ops ip6t_ops[] __read_mostly = {
.priority = NF_IP6_PRI_MANGLE,
},
{
- .hook = ip6t_local_hook,
+ .hook = ip6t_route_hook,
.owner = THIS_MODULE,
.pf = PF_INET6,
.hooknum = NF_INET_LOCAL_IN,
