Re: [PATCH nf-next] netfilter: Dissect flow after packet mangling

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 4/12/21 8:51 AM, Ido Schimmel wrote:
On Sun, Apr 11, 2021 at 06:18:05PM -0700, David Ahern wrote:
On 4/11/21 1:32 PM, Ido Schimmel wrote:
From: Ido Schimmel <idosch@xxxxxxxxxx>
<cut>


Once this goes in, can you add tests to one of the selftest scripts
(e.g., fib_rule_tests.sh)?

Yes. I used Michal's scripts from here [1] to test. Will try to simplify
it for a test case.

[1] https://lore.kernel.org/netdev/6b707dde-c6f0-ca3e-e817-a09c1e6b3f00@xxxxxxxxx/


Regarding those scripts:

- the commented out `-j TOS --set-tos 0x02` falls into ECN bits, so it's somewhat incorrect/obsolete - the uidrange selector (that was also ignored) is missing in the sequence of ip rules




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux