<html>
<head>
<base href="https://bugzilla.netfilter.org/" />
</head>
<body><span class="vcard"><a class="email" href="mailto:phil@nwl.cc" title="Phil Sutter <phil@nwl.cc>"> <span class="fn">Phil Sutter</span></a>
</span> changed
<a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED WORKSFORME - firewallrule on mld-listener-query not honored"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=998">bug 998</a>
<br>
<table border="1" cellspacing="0" cellpadding="8">
<tr>
<th>What</th>
<th>Removed</th>
<th>Added</th>
</tr>
<tr>
<td style="text-align:right;">CC</td>
<td>
</td>
<td>phil@nwl.cc
</td>
</tr>
<tr>
<td style="text-align:right;">Status</td>
<td>NEW
</td>
<td>RESOLVED
</td>
</tr>
<tr>
<td style="text-align:right;">Resolution</td>
<td>---
</td>
<td>WORKSFORME
</td>
</tr></table>
<p>
<div>
<b><a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED WORKSFORME - firewallrule on mld-listener-query not honored"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=998#c1">Comment # 1</a>
on <a class="bz_bug_link
bz_status_RESOLVED bz_closed"
title="RESOLVED WORKSFORME - firewallrule on mld-listener-query not honored"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=998">bug 998</a>
from <span class="vcard"><a class="email" href="mailto:phil@nwl.cc" title="Phil Sutter <phil@nwl.cc>"> <span class="fn">Phil Sutter</span></a>
</span></b>
<pre>I can't reproduce this issue. Here's what I tried on a current Fedora Rawhide:
table inet t {
chain c {
type filter hook input priority 0; policy accept;
ip6 hoplimit 1 icmpv6 type mld-listener-query counter accept
}
}
Then created the packet using scapy:
<span class="quote">>>> p = IPv6(src='fec0:42::1', dst='fec0:42::5')/ICMPv6MLQuery()
>>> ep = Ether(src='fe:54:00:62:0e:9a', dst='52:54:00:62:0e:9a')/p
>>> sendp(ep, iface='vnetbr0')</span >
Looking at the ruleset, I see the counter increments so the packet is
recognized by nftables.
I'll therefore close this ticket. If the problem still happens for you with
recent versions of nftables and kernel, feel free to reopen.
Cheers, Phil</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>