diff options
author | Jo-Philipp Wich <jo@mein.io> | 2017-01-13 18:31:08 +0100 |
---|---|---|
committer | Jo-Philipp Wich <jo@mein.io> | 2017-01-13 18:31:36 +0100 |
commit | 920170a27fe9a3b66d5a857d70408dbac3720e0f (patch) | |
tree | ebb5c7006a0ab4871e5146cc8dc1890f574a70d2 /target/linux/malta/be64 | |
parent | 9641ceea0ce68d1c507b9d2bbe7cf8da518a2eb8 (diff) | |
download | upstream-920170a27fe9a3b66d5a857d70408dbac3720e0f.tar.gz upstream-920170a27fe9a3b66d5a857d70408dbac3720e0f.tar.bz2 upstream-920170a27fe9a3b66d5a857d70408dbac3720e0f.zip |
firewall: fix forwarding local subnet traffic
Packets which are merely forwarded by the router and which are neither
involved in any DNAT/SNAT nor originate locally, are considered INVALID
from a conntrack point of view, causing them to get dropped in the
zone_*_dest_ACCEPT chains, since those only allow stream with state NEW
or UNTRACKED.
Remove the ctstate restriction on dest accept chains to properly pass-
through unrelated 3rd party traffic.
Signed-off-by: Jo-Philipp Wich <jo@mein.io>
Diffstat (limited to 'target/linux/malta/be64')
0 files changed, 0 insertions, 0 deletions