MT#55283 kernel-module: scrub forwarded skb metadata

Closes #2140

Change-Id: I89c8a75d79c1c16ece6ca98ae2bbd5f615cc3ca2
(cherry picked from commit 7051631)
(cherry picked from commit cc08c0f)

Author: idanfreiberg

kernel-module/nft_rtpengine.c

@@ -5176,6 +5176,11 @@ static int send_proxy_packet(struct sk_buff *skb, const struct re_address *src,
 		goto drop;
 	}
 
+	/* This skb was received from the network but is now being reinjected as
+	 * a new locally generated packet. Drop inherited routing, conntrack, and
+	 * netfilter metadata before handing it to the IP output path. */
+	skb_scrub_packet(skb, true);
+
 	switch (src->family) {
 		case AF_INET:
 			return send_proxy_packet4(skb, src, dst, tos, net);