<html>
<head>
<base href="https://bugzilla.netfilter.org/">
</head>
<body>
<p>
<div>
<b><a class="bz_bug_link
bz_status_NEW "
title="NEW - nft_fib checks only the main route table when iif is a slave of a master vrf interface"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1761#c4">Comment # 4</a>
on <a class="bz_bug_link
bz_status_NEW "
title="NEW - nft_fib checks only the main route table when iif is a slave of a master vrf interface"
href="https://bugzilla.netfilter.org/show_bug.cgi?id=1761">bug 1761</a>
from <span class="vcard"><a class="email" href="mailto:pablo@netfilter.org" title="Pablo Neira Ayuso <pablo@netfilter.org>"> <span class="fn">Pablo Neira Ayuso</span></a>
</span></b>
<pre>(In reply to tsv1991 from <a href="show_bug.cgi?id=1761#c3">comment #3</a>)
<span class="quote">> This patch works as it should, but I'm not sure it won't break anything
>
> --- /root/nft_fib_ipv4.c 2024-10-23 19:01:14.668000000 +0000
> +++ net/ipv4/netfilter/nft_fib_ipv4.c 2024-10-24 18:29:48.344000000 +0000
> @@ -64,7 +64,7 @@
> struct fib_result res;
> struct flowi4 fl4 = {
> .flowi4_scope = RT_SCOPE_UNIVERSE,
> - .flowi4_iif = LOOPBACK_IFINDEX,
> + .flowi4_iif = nft_in(pkt)->ifindex,
> .flowi4_uid = sock_net_uid(nft_net(pkt), NULL),
> };
> const struct net_device *oif;</span >
This looks very similar to the patch that has been upstreamed:
commit 05ef7055debc804e8083737402127975e7244fc4
Author: Florian Westphal <<a href="mailto:fw@strlen.de">fw@strlen.de</a>>
Date: Wed Oct 9 09:19:02 2024 +0200
netfilter: fib: check correct rtable in vrf setups
Could you please give it a try?
Thanks.</pre>
</div>
</p>
<hr>
<span>You are receiving this mail because:</span>
<ul>
<li>You are watching all bug changes.</li>
</ul>
</body>
</html>