diff options
author | 2009-12-25 17:30:22 -0800 | |
---|---|---|
committer | 2009-12-25 17:30:22 -0800 | |
commit | 28f6aeea3f12d37bd258b2c0d5ba891bff4ec479 (patch) | |
tree | fadf8801f14420d7aac5d0a22812da8773c7f836 /lib/debugobjects.c | |
parent | bnx2x: Initialize cnic status block during chip reset (diff) | |
download | wireguard-linux-28f6aeea3f12d37bd258b2c0d5ba891bff4ec479.tar.xz wireguard-linux-28f6aeea3f12d37bd258b2c0d5ba891bff4ec479.zip |
net: restore ip source validation
when using policy routing and the skb mark:
there are cases where a back path validation requires us
to use a different routing table for src ip validation than
the one used for mapping ingress dst ip.
One such a case is transparent proxying where we pretend to be
the destination system and therefore the local table
is used for incoming packets but possibly a main table would
be used on outbound.
Make the default behavior to allow the above and if users
need to turn on the symmetry via sysctl src_valid_mark
Signed-off-by: Jamal Hadi Salim <hadi@cyberus.ca>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'lib/debugobjects.c')
0 files changed, 0 insertions, 0 deletions