diff options
| author | Miaohe Lin <linmiaohe@huawei.com> | 2019-07-02 03:59:36 +0000 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2019-07-16 13:16:47 +0200 |
| commit | b575b24b8eee37f10484e951b62ce2a31c579775 (patch) | |
| tree | ae7972ecd1997e860b009fa17ded693d1ea6d6fb /net/ipv4/tcp_bpf.c | |
| parent | 1b0890cd60829bd51455dc5ad689ed58c4408227 (diff) | |
| download | linux-b575b24b8eee37f10484e951b62ce2a31c579775.tar.gz | |
netfilter: Fix rpfilter dropping vrf packets by mistake
When firewalld is enabled with ipv4/ipv6 rpfilter, vrf ipv4/ipv6 packets will be dropped. Vrf device will pass through netfilter hook twice. One with enslaved device and another one with l3 master device. So in device may dismatch witch out device because out device is always enslaved device.So failed with the check of the rpfilter and drop the packets by mistake. Signed-off-by: Miaohe Lin <linmiaohe@huawei.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/ipv4/tcp_bpf.c')
0 files changed, 0 insertions, 0 deletions