tree 60b4bfdd06efc0ab5cf297c470a273f470b7c1f5
parent abbcc73982445c1457901c7fc1d0d110e7a587e3
author Patrick McHardy <kaber@trash.net> 1136492459 -0800
committer David S. Miller <davem@davemloft.net> 1136492459 -0800

[NETFILTER]: Call POST_ROUTING hook before fragmentation

Call POST_ROUTING hook before fragmentation to get rid of the okfn use
in ip_refrag and save the useless fragmentation/defragmentation step
when NAT is used.

The patch introduces one user-visible change, the POSTROUTING chain
in the mangle table gets entire packets, not fragments, which should
simplify use of the MARK and CLASSIFY targets for queueing as a nice
side-effect.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>