net: restore ip source validation

Browse source

when using policy routing and the skb mark:
there are cases where a back path validation requires us
to use a different routing table for src ip validation than
the one used for mapping ingress dst ip.
One such a case is transparent proxying where we pretend to be
the destination system and therefore the local table
is used for incoming packets but possibly a main table would
be used on outbound.
Make the default behavior to allow the above and if users
need to turn on the symmetry via sysctl src_valid_mark

Signed-off-by: Jamal Hadi Salim <hadi@cyberus.ca>
Signed-off-by: David S. Miller <davem@davemloft.net>

...

This commit is contained in:

Jamal Hadi Salim 2009-12-25 17:30:22 -08:00 • committed by David S. Miller

parent 4a6e47a460

commit 28f6aeea3f

4 changed files with 5 additions and 0 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

1

include/linux/inetdevice.h

View file

1

include/linux/sysctl.h

View file

1

net/ipv4/devinet.c

View file

2

net/ipv4/fib_frontend.c

View file