Re: [PATCH v5] net: netfilter: Fix rpfilter dropping vrf packets by mistake

2019-07-16 Thread linmiaohe
> On Tue, Jul 17, 2019 at 19:17:36PM +, Pablo wrote: > > On Tue, Jul 02, 2019 at 03:59:36AM +, Miaohe Lin wrote: > > When firewalld is enabled with ipv4/ipv6 rpfilter, vrf > > ipv4/ipv6 packets will be dropped. Vrf device will pass through > > netfilter hook twice. One with enslaved

Re: [PATCH v5] net: netfilter: Fix rpfilter dropping vrf packets by mistake

2019-07-16 Thread Pablo Neira Ayuso
On Tue, Jul 02, 2019 at 03:59:36AM +, Miaohe Lin wrote: > When firewalld is enabled with ipv4/ipv6 rpfilter, vrf > ipv4/ipv6 packets will be dropped. Vrf device will pass > through netfilter hook twice. One with enslaved device > and another one with l3 master device. So in device may >

Re: [PATCH v5] net: netfilter: Fix rpfilter dropping vrf packets by mistake

2019-07-02 Thread linmiaohe
Add David Ahern. @David Ahern I'am so sorry but I rerun scripts/get_maintainer.pl . You are not in the list , so I forgot to add you to the email-to list. I'am sorry again. Have a good day. Best wishes. When firewalld is enabled with ipv4/ipv6 rpfilter, vrf ipv4/ipv6 packets will be dropped.

[PATCH v5] net: netfilter: Fix rpfilter dropping vrf packets by mistake

2019-07-01 Thread Miaohe Lin
When firewalld is enabled with ipv4/ipv6 rpfilter, vrf ipv4/ipv6 packets will be dropped. Vrf device will pass through netfilter hook twice. One with enslaved device and another one with l3 master device. So in device may dismatch witch out device because out device is always enslaved device.So