Browse Source

netfilter: nf_flow_table: fix checksum when handling DNAT

Add a missing call to csum_replace4 like on SNAT.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Felix Fietkau 7 years ago
parent
commit
f4b7ac5ec3
1 changed files with 1 additions and 0 deletions
  1. 1 0
      net/ipv4/netfilter/nf_flow_table_ipv4.c

+ 1 - 0
net/ipv4/netfilter/nf_flow_table_ipv4.c

@@ -111,6 +111,7 @@ static int nf_flow_dnat_ip(const struct flow_offload *flow, struct sk_buff *skb,
 	default:
 		return -1;
 	}
+	csum_replace4(&iph->check, addr, new_addr);
 
 	return nf_flow_nat_ip_l4proto(skb, iph, thoff, addr, new_addr);
 }