From: Felix Fietkau <nbd@nbd.name>
Date: Sun, 25 Feb 2018 17:18:52 +0000 (+0100)
Subject: netfilter: nf_flow_table: fix checksum when handling DNAT
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=f4b7ac5ec37d0b6b183677d8b3f10576b18945fd;p=openwrt%2Fstaging%2Fblogic.git

netfilter: nf_flow_table: fix checksum when handling DNAT

Add a missing call to csum_replace4 like on SNAT.

Signed-off-by: Felix Fietkau <nbd@nbd.name>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
---

diff --git a/net/ipv4/netfilter/nf_flow_table_ipv4.c b/net/ipv4/netfilter/nf_flow_table_ipv4.c
index 25d2975da156..282b9cc4fe82 100644
--- a/net/ipv4/netfilter/nf_flow_table_ipv4.c
+++ b/net/ipv4/netfilter/nf_flow_table_ipv4.c
@@ -111,6 +111,7 @@ static int nf_flow_dnat_ip(const struct flow_offload *flow, struct sk_buff *skb,
 	default:
 		return -1;
 	}
+	csum_replace4(&iph->check, addr, new_addr);
 
 	return nf_flow_nat_ip_l4proto(skb, iph, thoff, addr, new_addr);
 }