Re: nft for bridge.
ratheesh kannoth <[email protected]> Sun, 5 Oct 2025 12:33:56 +0530
| Newsgroups | gmane.comp.security.firewalls.netfilter.general |
|---|---|
| Message-ID | <CAGZFCEHxw0VkH0JJYjxNHevJ69BMZQ9zbhT=YbYS6ti2j8DAwg@mail.gmail.com> |
On Mon, Aug 18, 2025 at 7:50 PM Pablo Neira Ayuso <[email protected]> wrote: > No flowtable support for the bridge family yet, sorry. Thanks. For routed flow, Openvswitch case, it pushes Original and reply direction with the same cookie. But nft case, it pushes Original direction tuple twice. Is this expected ? or is this issue fixed with the latest kernel or nft ? MY nft version : nftables v1.1.5 (Commodore Bullmoose #6) My kernel : kernel 6.6 ADD cookie=18446462603462596360 (00:00:00:00:00:00, 192.168.11.200:30443) to (00:00:00:00:00:00, 192.168.9.100:35091) IPv4 TCP ADD cookie=18446462603462596360 (00:00:00:00:00:00, 192.168.11.200:30443) to (00:00:00:00:00:00, 192.168.9.100:35091) IPv4 TCP