Re: nftables RP filter and loopback

Pablo Neira Ayuso <[email protected]> Tue, 22 Apr 2025 16:15:56 +0200
Newsgroups gmane.comp.security.firewalls.netfilter.general
Message-ID <aAeknJtZBVycJKCm@calendula>
On Tue, Apr 22, 2025 at 02:53:51PM +0200, Florian Westphal wrote:
> Slavko <[email protected]> wrote:
> > + from 6.15 it will work even in input hook and lo as expected
> 
> Yes.
> 
> > + before 6.15 it doesn't work (properly) outside of prerouting
> >   hook only with lo traffic (other ifaces works)
> 
> Yes.  fib works fine but not for loopback traffic.

Florian, is it worth to request to include this update to -stable
kernels? Or you prefer the manpage note as it has been suggested?

Thanks.