]> www.infradead.org Git - users/dwmw2/linux.git/commit
netfilter: Use flowlabel flow key when re-routing mangled packets
authorFlorian Westphal <fw@strlen.de>
Thu, 6 Jun 2024 10:23:31 +0000 (12:23 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 11 Jun 2024 16:46:04 +0000 (18:46 +0200)
commit6f8f132cc7bac2ac76911e47d5baa378aafda4cb
tree77c52a319703eb834f5bb03a71879b7cc2b25e22
parent4e7aaa6b82d63e8ddcbfb56b4fd3d014ca586f10
netfilter: Use flowlabel flow key when re-routing mangled packets

'ip6 dscp set $v' in an nftables outpute route chain has no effect.
While nftables does detect the dscp change and calls the reroute hook.
But ip6_route_me_harder never sets the dscp/flowlabel:
flowlabel/dsfield routing rules are ignored and no reroute takes place.

Thanks to Yi Chen for an excellent reproducer script that I used
to validate this change.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Reported-by: Yi Chen <yiche@redhat.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/ipv6/netfilter.c