On Mon, May 29, 2017 at 07:25:37PM +0200, Florian Westphal wrote: > works: > add rule ip filter input ct original saddr 1.2.3.4 > (family ctx init initialises network base to proto_ip). > > fails to parse 1.2.3.4 address: > add rule ip filter input meta nfproto ipv4 ct original saddr 1.2.3.4 > > ... because meta_expr_pctx_update() won't find a dependency > from "ip" to "ip" and then overwrites the correct base with proto_unknown. > > "meta nfproto ip" is useless in the ip family, as it will always match, > i.e. a better (but more compliated) fix would be to remove the statement > during evaluation. > > Signed-off-by: Florian Westphal <fw@xxxxxxxxx> Acked-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
