target/linux/generic/backport-4.14/368-v4.18-netfilter-nf_flow_table-fix-offloading-connections-w.patch

   1 From: Felix Fietkau <nbd@nbd.name>
   2 Date: Fri, 23 Mar 2018 19:12:30 +0100
   3 Subject: [PATCH] netfilter: nf_flow_table: fix offloading connections with
   4  SNAT+DNAT
   5
   6 Pass all NAT types to the flow offload struct, otherwise parts of the
   7 address/port pair do not get translated properly, causing connection
   8 stalls
   9
  10 Signed-off-by: Felix Fietkau <nbd@nbd.name>
  11 ---
  12
  13 --- a/net/netfilter/nf_flow_table_core.c
  14 +++ b/net/netfilter/nf_flow_table_core.c
  15 @@ -84,7 +84,7 @@ flow_offload_alloc(struct nf_conn *ct, s
  16
  17         if (ct->status & IPS_SRC_NAT)
  18                 flow->flags |= FLOW_OFFLOAD_SNAT;
  19 -       else if (ct->status & IPS_DST_NAT)
  20 +       if (ct->status & IPS_DST_NAT)
  21                 flow->flags |= FLOW_OFFLOAD_DNAT;
  22
  23         return flow;