Thanks Julian, this looks good to me. Signed-off-by: Simon Horman <horms@xxxxxxxxxxxx> Pablo, please consider including this in nf-next along with the dependency listed below.
Recognize GRE tunnels in received ICMP errors and properly strip the tunnel headers. Signed-off-by: Julian Anastasov <ja@xxxxxx> -- net/netfilter/ipvs/ip_vs_core.c | 45 ++++++++++++++++++++++++++++++