From: David Ahern <d...@cumulusnetworks.com> Date: Wed, 14 Dec 2016 11:06:18 -0800
> Connection tracking with VRF is broken because the pass through the VRF
> device drops the connection tracking info. Removing the call to nf_reset
> allows DNAT and MASQUERADE to work across interfaces within a VRF.
>
> Fixes: 73e20b761acf ("net: vrf: Add support for PREROUTING rules on vrf
> device")
> Signed-off-by: David Ahern <d...@cumulusnetworks.com>
Applied and queued up for -stable, thanks David.
