summaryrefslogtreecommitdiff
path: root/scripts
diff options
context:
space:
mode:
authorJamal Hadi Salim <hadi@cyberus.ca>2009-12-25 17:30:22 -0800
committerDavid S. Miller <davem@davemloft.net>2009-12-25 17:30:22 -0800
commit28f6aeea3f12d37bd258b2c0d5ba891bff4ec479 (patch)
treefadf8801f14420d7aac5d0a22812da8773c7f836 /scripts
parent4a6e47a460ce55e283063fc3f7391c8ea46bea27 (diff)
downloadlinux-3.10-28f6aeea3f12d37bd258b2c0d5ba891bff4ec479.tar.gz
linux-3.10-28f6aeea3f12d37bd258b2c0d5ba891bff4ec479.tar.bz2
linux-3.10-28f6aeea3f12d37bd258b2c0d5ba891bff4ec479.zip
net: restore ip source validation
when using policy routing and the skb mark: there are cases where a back path validation requires us to use a different routing table for src ip validation than the one used for mapping ingress dst ip. One such a case is transparent proxying where we pretend to be the destination system and therefore the local table is used for incoming packets but possibly a main table would be used on outbound. Make the default behavior to allow the above and if users need to turn on the symmetry via sysctl src_valid_mark Signed-off-by: Jamal Hadi Salim <hadi@cyberus.ca> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions