Re: nftables RP filter and loopback
Pablo Neira Ayuso <[email protected]> Tue, 22 Apr 2025 16:15:56 +0200
| Newsgroups | gmane.comp.security.firewalls.netfilter.general |
|---|---|
| Message-ID | <aAeknJtZBVycJKCm@calendula> |
On Tue, Apr 22, 2025 at 02:53:51PM +0200, Florian Westphal wrote: > Slavko <[email protected]> wrote: > > + from 6.15 it will work even in input hook and lo as expected > > Yes. > > > + before 6.15 it doesn't work (properly) outside of prerouting > > hook only with lo traffic (other ifaces works) > > Yes. fib works fine but not for loopback traffic. Florian, is it worth to request to include this update to -stable kernels? Or you prefer the manpage note as it has been suggested? Thanks.