Re: [PATCH nf-next] netfilter: Dissect flow after packet mangling

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 4/12/21 8:18 PM, Ido Schimmel wrote:
On Mon, Apr 12, 2021 at 03:28:21PM +0200, Michal Soltys wrote:
On 4/12/21 8:51 AM, Ido Schimmel wrote:
On Sun, Apr 11, 2021 at 06:18:05PM -0700, David Ahern wrote:
On 4/11/21 1:32 PM, Ido Schimmel wrote:
From: Ido Schimmel <idosch@xxxxxxxxxx>
<cut>


Once this goes in, can you add tests to one of the selftest scripts
(e.g., fib_rule_tests.sh)?

Yes. I used Michal's scripts from here [1] to test. Will try to simplify
it for a test case.

[1] https://lore.kernel.org/netdev/6b707dde-c6f0-ca3e-e817-a09c1e6b3f00@xxxxxxxxx/


Regarding those scripts:

- the commented out `-j TOS --set-tos 0x02` falls into ECN bits, so it's
somewhat incorrect/obsolete
- the uidrange selector (that was also ignored) is missing in the sequence
of ip rules

I verified that with the patch, after adding mangling rules with
ip{,6}tables, packets continue to flow via right2. Can you test the
patch and verify it works as you expect?


Tested today - all recently added selectors are working correctly. Thanks.



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux