]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: Fix rpfilter dropping vrf packets by mistake
authorMiaohe Lin <linmiaohe@huawei.com>
Tue, 2 Jul 2019 03:59:36 +0000 (03:59 +0000)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 16 Jul 2019 11:16:47 +0000 (13:16 +0200)
commitc5dfc36d390e7f29a263bcf4c445225bfd6d6f6c
treeae7972ecd1997e860b009fa17ded693d1ea6d6fb
parentc902e6172ea4fb04d9468e1b855860965c10ac85
netfilter: Fix rpfilter dropping vrf packets by mistake

When firewalld is enabled with ipv4/ipv6 rpfilter, vrf
ipv4/ipv6 packets will be dropped. Vrf device will pass
through netfilter hook twice. One with enslaved device
and another one with l3 master device. So in device may
dismatch witch out device because out device is always
enslaved device.So failed with the check of the rpfilter
and drop the packets by mistake.

Signed-off-by: Miaohe Lin <linmiaohe@huawei.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/ipv4/netfilter/ipt_rpfilter.c
net/ipv6/netfilter/ip6t_rpfilter.c