Refactor the way SIOCSTPUT inserts an entry into the NAT table to use
ipf_nat_finalise(), which takes care of checksum calculations too.
This pushes some code back up into ipf_nat_new() that needs to look at
the rule pointer, which can be NULL if none was present in the ioctl.
3 files changed