Chinh Nguyen wrote: > Patrick McHardy wrote: > >>What values does skb->ip_summed have before that? > > > the skb->ip_summed value before the checksum check in tcp_v4_rcv is > CHECKSUM_NONE. Hence tcp_v4_rcv checks its value, which is incorrect because > the > checksum is with regards to the private IP but the NAT device has modified the > source IP.
Netfilter recalculates the checksum when NATing it. I believe that skb->ip_summed is set to CHECKSUM_NONE by esp_input > (net/ipv4/esp4.c:180) which is called by xfrm4_rcv_encap > (net/ipv4/xfrm4_input.c:101). The question is why the checksum is invalid. Please start by describing what you're trying to do. - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
