Ido Schimmel <idosch@xxxxxxxxxx> wrote: > @@ -110,7 +108,7 @@ void nft_fib4_eval(const struct nft_expr *expr, struct nft_regs *regs, > if (priv->flags & NFTA_FIB_F_MARK) > fl4.flowi4_mark = pkt->skb->mark; > > - fl4.flowi4_tos = iph->tos & DSCP_BITS; > + fl4.flowi4_tos = iph->tos & IPTOS_RT_MASK; If this is supposed to get centralised, wouldn't it make more sense to not mask it, or will that happen later? I thought plan was to ditch RT_MASK...