Re: [PATCH] netfilter: ipv6: Don't preserve original oif for loopback address

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Jan 21, 2019 at 06:45:27PM +0800, Eli Cooper wrote:
> Commit 508b09046c0f ("netfilter: ipv6: Preserve link scope traffic
> original oif") made ip6_route_me_harder() keep the original oif for
> link-local and multicast packets. However, it also affected packets
> for the loopback address because it used rt6_need_strict().
> 
> REDIRECT rules in the OUTPUT chain rewrite the destination to loopback
> address; thus its oif should not be preserved. This commit fixes the bug
> that redirected local packets are being dropped.

Applied, thanks.



[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux