tree 5b05b0324b8186fe8bc40ffced48c856b099547d
parent 2c38de4c1f8da799bdca0e4bb40ca13f2174d3e8
author Julian Anastasov <ja@ssi.bg> 1308238162 +0200
committer Patrick McHardy <kaber@trash.net> 1308238162 +0200

netfilter: nf_nat: avoid double seq_adjust for loopback

	Avoid double seq adjustment for loopback traffic
because it causes silent repetition of TCP data. One
example is passive FTP with DNAT rule and difference in the
length of IP addresses.

	This patch adds check if packet is sent and
received via loopback device. As the same conntrack is
used both for outgoing and incoming direction, we restrict
seq adjustment to happen only in POSTROUTING.

Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Patrick McHardy <kaber@trash.net>