nat: disable nat44-ei-in2out-output ttl check 85/36685/1
authorAlexander Skorichenko <askorichenko@netgate.com>
Fri, 27 May 2022 08:23:20 +0000 (08:23 +0000)
committerMatthew Smith <mgsmith@netgate.com>
Tue, 19 Jul 2022 12:24:51 +0000 (12:24 +0000)
commitfa27d4d4f1f3a32eba275f3fc4e06ff15c7a5690
tree421b180349116e10e5222178ba80982a03975b29
parent0d352a97c5e3ad1f5f6eab18a978a14b0b9e06a8
nat: disable nat44-ei-in2out-output ttl check

Type: fix

A packet passing through nat44-ei-in2out-output,
has its ttl value validated in earlier nodes.
"ip4-input" node checks ttl for locally generated packets.
"ip4-rewrite" node validates ttl in forwarded packets.

Thus for example, the ED counterpart disables ttl checks
in its "nat44-ed-in2out-output" node.
This patch updates nat44 EI conditions for ttl checks to
those currently used in nat44 ED case, meaning no extra ttl
validation for in2out when output-feature is enabled.

Signed-off-by: Alexander Skorichenko <askorichenko@netgate.com>
Change-Id: Idd15d7c9a746b60c0a6dac5537d00ef10c257fdc
(cherry picked from commit d1ca70c7e11dac7b9fff802ca5f1d9051c984c34)
src/plugins/nat/nat44-ei/nat44_ei_in2out.c