tree a065f4023c55b9d65d9dfe7786e84e15a39d890f
parent bbb5823cf742a7e955f35c7d891e4e936944c33a
author Ulrich Weber <ulrich.weber@sophos.com> 1351143285 +0000
committer Pablo Neira Ayuso <pablo@netfilter.org> 1351460614 +0100

netfilter: nf_nat: don't check for port change on ICMP tuples

ICMP tuples have id in src and type/code in dst.
So comparing src.u.all with dst.u.all will always fail here
and ip_xfrm_me_harder() is called for every ICMP packet,
even if there was no NAT.

Signed-off-by: Ulrich Weber <ulrich.weber@sophos.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>