Re: [PATCH 1/3] netfilter: nat: update hash bucket if nat changed after ct confirmed

From: Florian Westphal <fw@strlen.de>
Date: 2016-07-30 22:45:31
Also in: netfilter-devel

fxp2001640163@gmail.com [off-list ref] wrote:

From: Xiaoping Fan <redacted>

In some situations, NAT information is created after connection is
confirmed.

That sounds like a bug.

How can this happen?

nf_nat_setup_info() is only safe for non-confirmed conntracks
(not in hash table).