Xin Long <lucien....@gmail.com> wrote: > it seems the test is bogus and can be removed to fix this issue. > > if (dev_match || flags & XT_RPFILTER_LOOSE) > return FIB_RES_NH(res).nh_scope <= RT_SCOPE_HOST; > > ipv6 does not have this issue.
netfilter patches should be sent to netfilter-de...@vger.kernel.org > #endif > - if (dev_match || flags & XT_RPFILTER_LOOSE) > - return FIB_RES_NH(res).nh_scope <= RT_SCOPE_HOST; > return dev_match; > } This breaks --loose option, no? Thats why I earlier suggested to change this to > - if (dev_match || flags & XT_RPFILTER_LOOSE) > - return FIB_RES_NH(res).nh_scope <= RT_SCOPE_HOST; + return dev_match || flags & XT_RPFILTER_LOOSE; -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majord...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
