mirror of
https://github.com/adulau/aha.git
synced 2024-12-29 12:16:20 +00:00
[NETFILTER]: nf_nat_pptp: fix expectation removal
When removing the expectation for the opposite direction, the PPTP NAT helper initializes the tuple for lookup with the addresses of the opposite direction, which makes the lookup fail. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
c72c6b2a29
commit
a46bf7d5a8
1 changed files with 2 additions and 2 deletions
|
@ -72,9 +72,9 @@ static void pptp_nat_expected(struct nf_conn *ct,
|
|||
DEBUGP("we are PAC->PNS\n");
|
||||
/* build tuple for PNS->PAC */
|
||||
t.src.l3num = AF_INET;
|
||||
t.src.u3.ip = master->tuplehash[exp->dir].tuple.src.u3.ip;
|
||||
t.src.u3.ip = master->tuplehash[!exp->dir].tuple.src.u3.ip;
|
||||
t.src.u.gre.key = nat_pptp_info->pns_call_id;
|
||||
t.dst.u3.ip = master->tuplehash[exp->dir].tuple.dst.u3.ip;
|
||||
t.dst.u3.ip = master->tuplehash[!exp->dir].tuple.dst.u3.ip;
|
||||
t.dst.u.gre.key = nat_pptp_info->pac_call_id;
|
||||
t.dst.protonum = IPPROTO_GRE;
|
||||
}
|
||||
|
|
Loading…
Reference in a new issue