Skip to content
Commit 3241346e authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso Committed by Paul Gortmaker
Browse files

netfilter: nft_fwd_netdev: allow to redirect to ifb via ingress

commit bcfabee1 upstream.

Set skb->tc_redirected to 1, otherwise the ifb driver drops the packet.
Set skb->tc_from_ingress to 1 to reinject the packet back to the ingress
path after leaving the ifb egress path.

This patch inconditionally sets on these two skb fields that are
meaningful to the ifb driver. The existing forward action is guaranteed
to run from ingress path.

Fixes: 39e6dea2

 ("netfilter: nf_tables: add forward expression to the netdev family")
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: default avatarPaul Gortmaker <paul.gortmaker@windriver.com>
parent 0d50a981
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment