commit | b38fca8e0ecf7a681c4676904474492f9b571eb6 | [log] [download] |
---|---|---|
author | Darren Reed <darrenr@pobox.com> | Mon Aug 18 13:44:13 2008 +0000 |
committer | Darren Reed <darrenr@pobox.com> | Mon Aug 18 13:44:13 2008 +0000 |
tree | 39451a5dcae1085e5eafc0ce2fa94245b66a91fb | |
parent | b53dbbcd8157c872835c26193b8083a41fcea833 [diff] |
do not allow inbound packets to match NAT_DIVERTUDP nat_t's that are delivering packets locally because invariably allowing such will lead to the encaps'd packet being decapsulated again.