commit | 41a7cab6d329039d614ca5f0f87aff2dfd90637c | [log] [tgz] |
---|---|---|
author | Changli Gao <xiaosuo@gmail.com> | Thu Jan 20 15:49:52 2011 +0100 |
committer | Patrick McHardy <kaber@trash.net> | Thu Jan 20 15:49:52 2011 +0100 |
tree | ae4f721c29b3fa5f80820f520850d5c909d04786 | |
parent | 4cda47d2e7b21b0b41e44dbe4cd9804fea2d30e9 [diff] |
netfilter: nf_nat: place conntrack in source hash after SNAT is done If SNAT isn't done, the wrong info maybe got by the other cts. As the filter table is after DNAT table, the packets dropped in filter table also bother bysource hash table. Signed-off-by: Changli Gao <xiaosuo@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net>