Subject: Re: [RFC, PATCH 4/5]: netfilter+ipsec - policy lookup

From: Patrick McHardy <[email-masked]>
Date: Fri, 19 Mar 2004 16:30:29 +0100

David S. Miller wrote:
> On Thu, 18 Mar 2004 17:32:23 +0100
> Patrick McHardy <[email-masked]> wrote:
> 
> 
>>This patch adds policy lookups to ip_route_me_harder and makes NAT
>>reroute for any change that affects route/policy lookups.
> 
> 
> Why are you deleting that "fl.proto = iph->protocol;" line in
> net/core/netfilter.c?  Is something else going to set it properly?
> 

The patch adds a call to decode_session/xfrm_lookup below. This
handles packets with local and non-local source, setting fl.proto
only handles packets with local source. Also we must check if the
packet was already transformed to prevent loops.

Regards
Patrick