TEE: do not use TOS for routing

Otherwise the cloned packet may be subject to more policy routing
rules than expected.

diff --git a/extensions/xt_TEE.c b/extensions/xt_TEE.c
index 20d5d8ad71ff7ad566ceead95783e46f792a893e..447254db2b97f937335af792dd4ac65d146feedf 100644 (file)
--- a/extensions/xt_TEE.c
+++ b/extensions/xt_TEE.c
@@ -57,7 +57,6 @@ static bool tee_routing(struct sk_buff *skb,
                .nl_u = {
                        .ip4_u = {
                                .daddr = info->gw.ip,
-                               .tos   = RT_TOS(iph->tos),
                                .scope = RT_SCOPE_UNIVERSE,
                        }
                }