From: Jamal Hadi Salim <hadi@cyberus.ca>
Date: Sat, 26 Dec 2009 01:30:22 +0000 (-0800)
Subject: net: restore ip source validation
X-Git-Tag: v2.6.33-rc3~44^2~10
X-Git-Url: http://git.openpandora.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=28f6aeea3f12d37bd258b2c0d5ba891bff4ec479;p=pandora-kernel.git

net: restore ip source validation

when using policy routing and the skb mark:
there are cases where a back path validation requires us
to use a different routing table for src ip validation than
the one used for mapping ingress dst ip.
One such a case is transparent proxying where we pretend to be
the destination system and therefore the local table
is used for incoming packets but possibly a main table would
be used on outbound.
Make the default behavior to allow the above and if users
need to turn on the symmetry via sysctl src_valid_mark

Signed-off-by: Jamal Hadi Salim <hadi@cyberus.ca>
Signed-off-by: David S. Miller <davem@davemloft.net>
---

Reading git-diff-tree failed