Ulrich Weber 38fe36a248 netfilter: nf_nat: don't check for port change on ICMP tuples
ICMP tuples have id in src and type/code in dst.
So comparing src.u.all with dst.u.all will always fail here
and ip_xfrm_me_harder() is called for every ICMP packet,
even if there was no NAT.

Signed-off-by: Ulrich Weber <ulrich.weber@sophos.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2012-10-28 22:43:34 +01:00
..
2012-10-08 17:42:35 -04:00
2012-10-08 17:42:36 -04:00
2012-10-08 17:42:36 -04:00
2012-10-12 13:56:52 -04:00
2012-10-06 03:04:45 +09:00
2012-10-12 13:52:40 -04:00
2012-10-18 15:34:31 -04:00
2012-10-08 17:42:36 -04:00