On Wed, Feb 17, 2016 at 7:52 PM, Mahesh Bandewar <mah...@bandewar.net> wrote: > From: Mahesh Bandewar <mahe...@google.com> > > Scrub skb before hitting the iptable hooks to ensure packets hit > these hooks in master's namespace. > > Signed-off-by: Mahesh Bandewar <mahe...@google.com> > --- > drivers/net/ipvlan/ipvlan_core.c | 4 ++-- > 1 file changed, 2 insertions(+), 2 deletions(-) > > diff --git a/drivers/net/ipvlan/ipvlan_core.c > b/drivers/net/ipvlan/ipvlan_core.c > index 8c48bb2a94ea..a1f87ec316cf 100644 > --- a/drivers/net/ipvlan/ipvlan_core.c > +++ b/drivers/net/ipvlan/ipvlan_core.c > @@ -365,7 +365,7 @@ static int ipvlan_process_v4_outbound(struct sk_buff *skb) > ip_rt_put(rt); > goto err; > } > - skb_dst_drop(skb); > + skb_scrub_packet(skb, true); > skb_dst_set(skb, &rt->dst); > err = ip_local_out(net, skb->sk, skb); > if (unlikely(net_xmit_eval(err))) > @@ -403,7 +403,7 @@ static int ipvlan_process_v6_outbound(struct sk_buff *skb) > dst_release(dst); > goto err; > } > - skb_dst_drop(skb); > + skb_scrub_packet(skb, true);
At least this patch is still same with the previous version. Or am I missing anything?
