[Bug 1468] New: [netdev] dropping ether type vlan frames drops ICMPv6 type 134

[bugzilla-daemon at netfilter.org]

https://bugzilla.netfilter.org/show_bug.cgi?id=1468

            Bug ID: 1468
           Summary: [netdev] dropping ether type vlan frames drops ICMPv6
                    type 134
           Product: nftables
           Version: unspecified
          Hardware: other
                OS: Debian GNU/Linux
            Status: NEW
          Severity: normal
          Priority: P5
         Component: nft
          Assignee: pablo at netfilter.org
          Reporter: vtolkm at gmail.com

kernel 5.9.0-rc6 armv7l | nft 0.9.6
___

table netdev filter {
        set et {
                typeof ether type
                flags constant
                counter
                elements = { vlan }
        }

        chain input {
                type filter hook ingress device "eth2" priority -500; policy
accept;
                ether type @et log prefix "nd et DROP" flags all drop
        }
}

The ISP is multi-casting ICMPv6 type 134 on the subscriber line, however
filtering vlan frames is dropping ICMPv6 type 134, the counter increases and
the log exhibits:

nd et DROPIN=eth2 OUT= MACSRC=78:ba:f9:73:f5:74 MACDST=33:33:00:00:00:01
MACPROTO=86dd SRC=fe80:0000:0000:0000:7aba:f9ff:fe73:f574
DST=ff02:0000:0000:0000:0000:0000:0000:0001 LEN=72 TC=224 HOPLIMIT=255
FLOWLBL=0 PROTO=ICMPv6 TYPE=134 CODE=0

-- 
You are receiving this mail because:
You are watching all bug changes.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.netfilter.org/pipermail/netfilter-buglog/attachments/20200923/b7b24f82/attachment.html>