[PATCH nf] netfilter: nft_chain_route: re-route before skb is queued to userspace

2016-09-06 Thread Liping Zhang
From: Liping Zhang Imagine such situation, user add the following nft rules, and queue the packets to userspace for further check: # ip rule add fwmark 0x0/0x1 lookup eth0 # ip rule add fwmark 0x1/0x1 lookup eth1 # nft add table filter # nft add chain filter output {type route hook output

Re: [PATCH nf] netfilter: nft_chain_route: re-route before skb is queued to userspace

2016-09-07 Thread Pablo Neira Ayuso
On Tue, Sep 06, 2016 at 10:31:02PM +0800, Liping Zhang wrote: [...] > This is consistent with the mangle table in iptables. Right, thanks for getting this code in sync with the ip{6}table_mangle codebase. So I'm applying this. -- To unsubscribe from this list: send the line "unsubscribe netfilter