On Tue, Apr 16, 2024 at 9:27 PM Mark Michelson wrote:
> Hi Ales, I have a couple of notes below.
>
Hi Mark,
thank you for the review.
>
> On 4/10/24 09:29, Ales Musil wrote:
> > The current packet injection loses ct_state in the process. When
> > the ct_state is lost we might commit to DNAT
Hi Ales, I have a couple of notes below.
On 4/10/24 09:29, Ales Musil wrote:
The current packet injection loses ct_state in the process. When
the ct_state is lost we might commit to DNAT zone and perform
zero SNAT after the packet injection. This causes the first session
to be wrong as the
The current packet injection loses ct_state in the process. When
the ct_state is lost we might commit to DNAT zone and perform
zero SNAT after the packet injection. This causes the first session
to be wrong as the reply packets are not unDNATted.
Instead of re-injecting the packet back into the