diff options
| author | Florian Westphal <fw@strlen.de> | 2018-07-25 21:38:43 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-08-16 19:36:58 +0200 |
| commit | da786717e0894886301ed2536843c13f9e8fd53e (patch) | |
| tree | e5f1e5a4799f6381e5edf6b9932358caf71b7c1d /net/netfilter/nft_set_rbtree.c | |
| parent | b71ed54dc2a1dbb4328f7d7c98d712747aee92ba (diff) | |
netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
Roman reports that DHCPv6 client no longer sees replies from server
due to
ip6tables -t raw -A PREROUTING -m rpfilter --invert -j DROP
rule. We need to set the F_IFACE flag for linklocal addresses, they
are scoped per-device.
Fixes: 47b7e7f82802 ("netfilter: don't set F_IFACE on ipv6 fib lookups")
Reported-by: Roman Mamedov <rm@romanrm.net>
Tested-by: Roman Mamedov <rm@romanrm.net>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nft_set_rbtree.c')
0 files changed, 0 insertions, 0 deletions