diff mbox series

[07/14] netfilter: nf_flow_table: fix checksum when handling DNAT

Message ID 20180302203302.3724-8-pablo@netfilter.org
State Accepted, archived
Delegated to: David Miller
Headers show
Series [01/14] netfilter: ipt_CLUSTERIP: put config struct if we can't increment ct refcount | expand

Commit Message

Pablo Neira Ayuso March 2, 2018, 8:32 p.m. UTC 
From: Felix Fietkau <nbd@nbd.name>

Add a missing call to csum_replace4 like on SNAT.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---
 net/ipv4/netfilter/nf_flow_table_ipv4.c | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/net/ipv4/netfilter/nf_flow_table_ipv4.c b/net/ipv4/netfilter/nf_flow_table_ipv4.c
index 25d2975da156..282b9cc4fe82 100644
--- a/net/ipv4/netfilter/nf_flow_table_ipv4.c
+++ b/net/ipv4/netfilter/nf_flow_table_ipv4.c
@@ -111,6 +111,7 @@  static int nf_flow_dnat_ip(const struct flow_offload *flow, struct sk_buff *skb,
 	default:
 		return -1;
 	}
+	csum_replace4(&iph->check, addr, new_addr);
 
 	return nf_flow_nat_ip_l4proto(skb, iph, thoff, addr, new_addr);
 }