On 4/25/19 7:43 AM, linmiaohe wrote: > From: Miaohe Lin <linmiaohe@xxxxxxxxxx> > > When firewalld is enabled with ipv4/ipv6 rpfilter, vrf > ipv4/ipv6 packets will be dropped because in device is > vrf but out device is an enslaved device. So failed with > the check of the rpfilter. > > Signed-off-by: Miaohe Lin <linmiaohe@xxxxxxxxxx> > --- > net/ipv4/netfilter/ipt_rpfilter.c | 1 + > net/ipv6/netfilter/ip6t_rpfilter.c | 10 +++++++++- > 2 files changed, 10 insertions(+), 1 deletion(-) > Reviewed-by: David Ahern <dsahern@xxxxxxxxx>