[NETFILTER]: Don't exclude local packets from MASQUERADING Increases consistency in source-address selection. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller --- commit 9baa5c67ff4ce57b6b9f68c90714a1bb876fccd7 tree 27f2c48e12e1bb5e3e6d5f8320651c213892ed20 parent fb13ab2849074244a51ae5147483610529a29ced author Patrick McHardy Sun, 14 Aug 2005 17:32:50 -0700 committer David S. Miller Mon, 29 Aug 2005 15:58:36 -0700 net/ipv4/netfilter/ipt_MASQUERADE.c | 5 ----- 1 files changed, 0 insertions(+), 5 deletions(-) diff --git a/net/ipv4/netfilter/ipt_MASQUERADE.c b/net/ipv4/netfilter/ipt_MASQUERADE.c --- a/net/ipv4/netfilter/ipt_MASQUERADE.c +++ b/net/ipv4/netfilter/ipt_MASQUERADE.c @@ -86,11 +86,6 @@ masquerade_target(struct sk_buff **pskb, IP_NF_ASSERT(hooknum == NF_IP_POST_ROUTING); - /* FIXME: For the moment, don't do local packets, breaks - testsuite for 2.3.49 --RR */ - if ((*pskb)->sk) - return NF_ACCEPT; - ct = ip_conntrack_get(*pskb, &ctinfo); IP_NF_ASSERT(ct && (ctinfo == IP_CT_NEW || ctinfo == IP_CT_RELATED || ctinfo == IP_CT_RELATED + IP_CT_IS_REPLY));