Re: [PATCH nf-next] netfilter: Dissect flow after packet mangling

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Apr 12, 2021 at 03:28:21PM +0200, Michal Soltys wrote:
> On 4/12/21 8:51 AM, Ido Schimmel wrote:
> > On Sun, Apr 11, 2021 at 06:18:05PM -0700, David Ahern wrote:
> > > On 4/11/21 1:32 PM, Ido Schimmel wrote:
> > > > From: Ido Schimmel <idosch@xxxxxxxxxx>
> > > > <cut>
> > > > 
> > > 
> > > Once this goes in, can you add tests to one of the selftest scripts
> > > (e.g., fib_rule_tests.sh)?
> > 
> > Yes. I used Michal's scripts from here [1] to test. Will try to simplify
> > it for a test case.
> > 
> > [1] https://lore.kernel.org/netdev/6b707dde-c6f0-ca3e-e817-a09c1e6b3f00@xxxxxxxxx/
> > 
> 
> Regarding those scripts:
> 
> - the commented out `-j TOS --set-tos 0x02` falls into ECN bits, so it's
> somewhat incorrect/obsolete
> - the uidrange selector (that was also ignored) is missing in the sequence
> of ip rules

I verified that with the patch, after adding mangling rules with
ip{,6}tables, packets continue to flow via right2. Can you test the
patch and verify it works as you expect?



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux