-
由 Ulrich Weber 提交于
ICMP tuples have id in src and type/code in dst. So comparing src.u.all with dst.u.all will always fail here and ip_xfrm_me_harder() is called for every ICMP packet, even if there was no NAT. Signed-off-by: NUlrich Weber <ulrich.weber@sophos.com> Signed-off-by: NPablo Neira Ayuso <pablo@netfilter.org>
38fe36a2