Re: nftables RP filter and loopback

Slavko <[email protected]> Tue, 22 Apr 2025 13:15:35 +0000
Newsgroups gmane.comp.security.firewalls.netfilter.general
Message-ID <[email protected]>
On 22. apríla 2025 12:53:51 UTC, Florian Westphal <[email protected]> wrote:
>Slavko <[email protected]> wrote:
>> + from 6.15 it will work even in input hook and lo as expected
>
>Yes.
>
>> + before 6.15 it doesn't work (properly) outside of prerouting
>>   hook only with lo traffic (other ifaces works)
>
>Yes.  fib works fine but not for loopback traffic.
>

Thanks, IMO worth of (short) note in manpage, or at least
in wiki page.

refards


-- 
Slavko
https://www.slavino.sk/