The first patch fixes re-routing of IPv6 packets mangled by Netfilter rules to consider the layer 3 VRF domain. The second patch updates both IPv4 and IPv6 re-routing to use the recently added l3mdev flow key instead of abusing the oif flow key to select the L3 domain. These patches have been explicitly split up to allow stable to pick up the first patch as-is. Changes in v2: - Add a second patch to migrate IPv4/6 re-routing to l3mdev flow key Martin Willi (2): netfilter: Update ip6_route_me_harder to consider L3 domain netfilter: Use l3mdev flow key when re-routing mangled packets net/ipv4/netfilter.c | 3 +-- net/ipv6/netfilter.c | 9 +++++++-- 2 files changed, 8 insertions(+), 4 deletions(-) -- 2.25.1