On 2018-02-25 19:39, Pablo Neira Ayuso wrote: > On Sun, Feb 25, 2018 at 06:18:52PM +0100, Felix Fietkau wrote: >> Add a missing call to csum_replace4 like on SNAT >> >> Signed-off-by: Felix Fietkau <nbd@xxxxxxxx> >> --- >> net/netfilter/nf_flow_table_ip.c | 1 + >> 1 file changed, 1 insertion(+) >> >> diff --git a/net/netfilter/nf_flow_table_ip.c b/net/netfilter/nf_flow_table_ip.c >> index df58ed8be330..6d9d4b0599cc 100644 >> --- a/net/netfilter/nf_flow_table_ip.c >> +++ b/net/netfilter/nf_flow_table_ip.c >> @@ -130,6 +130,7 @@ static int nf_flow_dnat_ip(const struct flow_offload *flow, struct sk_buff *skb, >> default: >> return -1; >> } >> + csum_replace4(&iph->check, addr, new_addr); > > This is a bugfix, right? > > I can get this into nf.git, thanks. Yes, that would be good. - Felix -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html