tree c51eddec67bdf50f37c21001ddc8c5e707c9b87e
parent 2e2a390b7f6784d2409656f5ccf3433f4ec3e18d
author Pau Espin Pedrol <pau.espin@tessares.net> 1483731207 +0100
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1502466575 -0700

netfilter: use fwmark_reflect in nf_send_reset


[ Upstream commit cc31d43b4154ad5a7d8aa5543255a93b7e89edc2 ]

Otherwise, RST packets generated by ipt_REJECT always have mark 0 when
the routing is checked later in the same code path.

Fixes: e110861f8609 ("net: add a sysctl to reflect the fwmark on replies")
Cc: Lorenzo Colitti <lorenzo@google.com>
Signed-off-by: Pau Espin Pedrol <pau.espin@tessares.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <alexander.levin@verizon.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>