Clear the skb hash when it does not reflect the actual header values any more. Signed-off-by: Jarno Rajahalme <jarno@xxxxxxx> --- net/netfilter/nf_nat_core.c | 1 + 1 file changed, 1 insertion(+) diff --git a/net/netfilter/nf_nat_core.c b/net/netfilter/nf_nat_core.c index 06a9f45..3c2302f 100644 --- a/net/netfilter/nf_nat_core.c +++ b/net/netfilter/nf_nat_core.c @@ -505,6 +505,7 @@ unsigned int nf_nat_packet(struct nf_conn *ct, if (!l3proto->manip_pkt(skb, 0, l4proto, &target, mtype)) return NF_DROP; } + skb_clear_hash(skb); return NF_ACCEPT; } EXPORT_SYMBOL_GPL(nf_nat_packet); -- 2.1.4 -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
