summaryrefslogtreecommitdiffstats
path: root/net/wanrouter
diff options
context:
space:
mode:
authorJamal Hadi Salim <hadi@cyberus.ca>2009-12-25 17:30:22 -0800
committerDavid S. Miller <davem@davemloft.net>2009-12-25 17:30:22 -0800
commit28f6aeea3f12d37bd258b2c0d5ba891bff4ec479 (patch)
treefadf8801f14420d7aac5d0a22812da8773c7f836 /net/wanrouter
parent4a6e47a460ce55e283063fc3f7391c8ea46bea27 (diff)
downloadop-kernel-dev-28f6aeea3f12d37bd258b2c0d5ba891bff4ec479.zip
op-kernel-dev-28f6aeea3f12d37bd258b2c0d5ba891bff4ec479.tar.gz
net: restore ip source validation
when using policy routing and the skb mark: there are cases where a back path validation requires us to use a different routing table for src ip validation than the one used for mapping ingress dst ip. One such a case is transparent proxying where we pretend to be the destination system and therefore the local table is used for incoming packets but possibly a main table would be used on outbound. Make the default behavior to allow the above and if users need to turn on the symmetry via sysctl src_valid_mark Signed-off-by: Jamal Hadi Salim <hadi@cyberus.ca> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/wanrouter')
0 files changed, 0 insertions, 0 deletions
OpenPOWER on IntegriCloud