diff options
| author | Julian Anastasov | 2018-06-02 20:52:15 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso | 2018-06-04 18:28:47 +0200 |
| commit | 6fcc02e3c2bddeaf628fde3c6a5ab3216d45691a (patch) | |
| tree | 0b2f6bd5861ec829fb7ef9c599b5fe5ee124ccea /block | |
| parent | netfilter: nft_reject_bridge: fix skb allocation size in nft_reject_br_send_v... (diff) | |
| download | kernel-qcow2-linux-6fcc02e3c2bddeaf628fde3c6a5ab3216d45691a.tar.gz kernel-qcow2-linux-6fcc02e3c2bddeaf628fde3c6a5ab3216d45691a.tar.xz kernel-qcow2-linux-6fcc02e3c2bddeaf628fde3c6a5ab3216d45691a.zip | |
ipvs: fix check on xmit to non-local addresses
There is mistake in the rt_mode_allow_non_local assignment.
It should be used to check if sending to non-local addresses is
allowed, now it checks if local addresses are allowed.
As local addresses are allowed for most of the cases, the only
places that are affected are for traffic to transparent cache
servers:
- bypass connections when cache server is not available
- related ICMP in FORWARD hook when sent to cache server
Fixes: 4a4739d56b00 ("ipvs: Pull out crosses_local_route_boundary logic")
Signed-off-by: Julian Anastasov <ja@ssi.bg>
Acked-by: Simon Horman <horms@verge.net.au>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'block')
0 files changed, 0 insertions, 0 deletions