netfilter: ip6table_mangle: don't reroute in LOCAL_IN

netfilter: ip6table_mangle: don't reroute in LOCAL_IN

[Patrick McHardy]

[-- Attachment #1: Type: text/plain, Size: 120 bytes --]

Attached is a single fix for 2.6.26 that corrects the LOCAL_IN
hook function in ip6table_mangle. Please apply, thanks.


[-- Attachment #2: 01.diff --]
[-- Type: text/x-diff, Size: 901 bytes --]

commit 0a9d392f66ab6d4bf0efbfa1b22330548b931498
Author: Patrick McHardy <kaber@trash.net>
Date:   Tue Jun 24 13:58:23 2008 +0200

    netfilter: ip6table_mangle: don't reroute in LOCAL_IN
    
    Rerouting should only happen in LOCAL_OUT, in INPUT its useless
    since the packet has already chosen its final destination.
    
    Noticed by Alexey Dobriyan <adobriyan@gmail.com>.
    
    Signed-off-by: Patrick McHardy <kaber@trash.net>

diff --git a/net/ipv6/netfilter/ip6table_mangle.c b/net/ipv6/netfilter/ip6table_mangle.c
index 27a5e8b..f405cea 100644
--- a/net/ipv6/netfilter/ip6table_mangle.c
+++ b/net/ipv6/netfilter/ip6table_mangle.c
@@ -129,7 +129,7 @@ static struct nf_hook_ops ip6t_ops[] __read_mostly = {
 		.priority	= NF_IP6_PRI_MANGLE,
 	},
 	{
-		.hook		= ip6t_local_hook,
+		.hook		= ip6t_route_hook,
 		.owner		= THIS_MODULE,
 		.pf		= PF_INET6,
 		.hooknum	= NF_INET_LOCAL_IN,

Re: netfilter: ip6table_mangle: don't reroute in LOCAL_IN

[David Miller]

From: Patrick McHardy <kaber@trash.net>
Date: Tue, 24 Jun 2008 14:07:13 +0200

> Attached is a single fix for 2.6.26 that corrects the LOCAL_IN
> hook function in ip6table_mangle. Please apply, thanks.

Applied and pushed out to net-2.6, thanks1