[Bug 1468] New: [netdev] dropping ether type vlan frames drops ICMPv6 type 134

bugzilla-daemon at netfilter.org bugzilla-daemon at netfilter.org
Wed Sep 23 14:36:56 CEST 2020


            Bug ID: 1468
           Summary: [netdev] dropping ether type vlan frames drops ICMPv6
                    type 134
           Product: nftables
           Version: unspecified
          Hardware: other
                OS: Debian GNU/Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: vtolkm at gmail.com

kernel 5.9.0-rc6 armv7l | nft 0.9.6

table netdev filter {
        set et {
                typeof ether type
                flags constant
                elements = { vlan }

        chain input {
                type filter hook ingress device "eth2" priority -500; policy
                ether type @et log prefix "nd et DROP" flags all drop

The ISP is multi-casting ICMPv6 type 134 on the subscriber line, however
filtering vlan frames is dropping ICMPv6 type 134, the counter increases and
the log exhibits:

nd et DROPIN=eth2 OUT= MACSRC=78:ba:f9:73:f5:74 MACDST=33:33:00:00:00:01
MACPROTO=86dd SRC=fe80:0000:0000:0000:7aba:f9ff:fe73:f574
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=72 TC=224 HOPLIMIT=255

You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200923/b7b24f82/attachment.html>

More information about the netfilter-buglog mailing list