Eugene Crosser <crosser@xxxxxxxxxxx> wrote:
> This reverts commit 09e856d54bda5f288ef8437a90ab2b9b3eab83d1.
>
> When an interface is enslaved in a VRF, prerouting conntrack hook is
> called twice: once in the context of the original input interface, and
> once in the context of the VRF interface. If no special precausions are
> taken, this leads to creation of two conntrack entries instead of one,
> and breaks SNAT.
Fixes: 09e856d54bda5f ("vrf: Reset skb conntrack connection on VRF rcv")
Acked-by: Florian Westphal <fw@xxxxxxxxx>
