Re: [PATCH] net: restore ip source validation WAS(Re: [tproxy,regression] tproxy broken in 2.6.32
From: Julian Anastasov <ja@ssi.bg>
Date: 2009-12-13 18:20:32
Hello, On Sun, 13 Dec 2009, jamal wrote:
Ok, I am gonna pull a Rick-Jones;-> and ASS-U-ME the attached patch is fine. cheers, jamal
quoted hunk ↗ jump to hunk
--- a/net/ipv4/fib_frontend.c +++ b/net/ipv4/fib_frontend.c@@ -252,6 +252,8 @@ int fib_validate_source(__be32 src, __be32 dst, u8 tos, int oif, no_addr = in_dev->ifa_list == NULL; rpf = IN_DEV_RPFILTER(in_dev); accept_local = IN_DEV_ACCEPT_LOCAL(in_dev); + if (mark && !IN_DEV_SRC_VMARK(in_dev))
May be "fl.mark = 0;" ?:
+ mark = 0;
}
rcu_read_unlock();Regards -- Julian Anastasov [off-list ref]