From patchwork Mon Oct 15 10:44:48 2012 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Elison Niven X-Patchwork-Id: 191520 Return-Path: X-Original-To: incoming@patchwork.ozlabs.org Delivered-To: patchwork-incoming@bilbo.ozlabs.org Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by ozlabs.org (Postfix) with ESMTP id 43D0B2C0080 for ; Mon, 15 Oct 2012 21:54:20 +1100 (EST) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1750953Ab2JOKyR (ORCPT ); Mon, 15 Oct 2012 06:54:17 -0400 Received: from mailhost.elitecore.com ([203.88.135.194]:55894 "EHLO elitecore.com" rhost-flags-OK-OK-OK-FAIL) by vger.kernel.org with ESMTP id S1750739Ab2JOKyR (ORCPT ); Mon, 15 Oct 2012 06:54:17 -0400 X-Greylist: delayed 410 seconds by postgrey-1.27 at vger.kernel.org; Mon, 15 Oct 2012 06:54:16 EDT Received: (qmail 3023 invoked from network); 15 Oct 2012 10:47:20 -0000 Received: from unknown (HELO elisonniven.elitecore.co.in) (elison.niven@cyberoam.com@[10.103.6.114]) (envelope-sender ) by elitecore.com (qmail-ldap-1.03) with SMTP for ; 15 Oct 2012 10:47:20 -0000 From: Elison Niven To: Patrick McHardy , netfilter-devel@vger.kernel.org Cc: sanket.shah@cyberoam.com, Elison Niven Subject: [PATCH 1/1] netfilter : fix hooks for SNAT and DNAT targets Date: Mon, 15 Oct 2012 16:14:48 +0530 Message-Id: <1350297888-3363-1-git-send-email-elison.niven@cyberoam.com> X-Mailer: git-send-email 1.7.7.6 X-Cyberoam-smtpxy-version: 1.0.6.3 X-Cyberoam-AV-Policy: Default Rule Sender: netfilter-devel-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: netfilter-devel@vger.kernel.org Correct hooks for SNAT and DNAT targets in xt_nat.c : SNAT hooks should be POST_ROUTING and LOCAL_IN. DNAT hooks should be PRE_ROUTING and LOCAL_OUT. Signed-off-by: Elison Niven Signed-off-by: Sanket Shah --- net/netfilter/xt_nat.c | 8 ++++---- 1 files changed, 4 insertions(+), 4 deletions(-) diff --git a/net/netfilter/xt_nat.c b/net/netfilter/xt_nat.c index 81aafa8..bea7464 100644 --- a/net/netfilter/xt_nat.c +++ b/net/netfilter/xt_nat.c @@ -111,7 +111,7 @@ static struct xt_target xt_nat_target_reg[] __read_mostly = { .family = NFPROTO_IPV4, .table = "nat", .hooks = (1 << NF_INET_POST_ROUTING) | - (1 << NF_INET_LOCAL_OUT), + (1 << NF_INET_LOCAL_IN), .me = THIS_MODULE, }, { @@ -123,7 +123,7 @@ static struct xt_target xt_nat_target_reg[] __read_mostly = { .family = NFPROTO_IPV4, .table = "nat", .hooks = (1 << NF_INET_PRE_ROUTING) | - (1 << NF_INET_LOCAL_IN), + (1 << NF_INET_LOCAL_OUT), .me = THIS_MODULE, }, { @@ -133,7 +133,7 @@ static struct xt_target xt_nat_target_reg[] __read_mostly = { .targetsize = sizeof(struct nf_nat_range), .table = "nat", .hooks = (1 << NF_INET_POST_ROUTING) | - (1 << NF_INET_LOCAL_OUT), + (1 << NF_INET_LOCAL_IN), .me = THIS_MODULE, }, { @@ -143,7 +143,7 @@ static struct xt_target xt_nat_target_reg[] __read_mostly = { .targetsize = sizeof(struct nf_nat_range), .table = "nat", .hooks = (1 << NF_INET_PRE_ROUTING) | - (1 << NF_INET_LOCAL_IN), + (1 << NF_INET_LOCAL_OUT), .me = THIS_MODULE, }, };