Re: nft for bridge.
Florian Westphal <[email protected]> Sun, 5 Oct 2025 13:45:39 +0200
| Newsgroups | gmane.comp.security.firewalls.netfilter.general |
|---|---|
| Message-ID | <[email protected]> |
ratheesh kannoth <[email protected]> wrote: > On Mon, Aug 18, 2025 at 7:50 PM Pablo Neira Ayuso <[email protected]> wrote: > > No flowtable support for the bridge family yet, sorry. > Thanks. For routed flow, Openvswitch case, it pushes Original and > reply direction with the same cookie. But nft case, it pushes Original > direction tuple twice. Is this expected ? or is this issue fixed with > the latest kernel or nft ? You will need to figure that out yourself. Most of us a volunteers. > MY nft version : nftables v1.1.5 (Commodore Bullmoose #6) > My kernel : kernel 6.6 > > ADD cookie=18446462603462596360 (00:00:00:00:00:00, > 192.168.11.200:30443) to (00:00:00:00:00:00, 192.168.9.100:35091) IPv4 > TCP > ADD cookie=18446462603462596360 (00:00:00:00:00:00, > 192.168.11.200:30443) to (00:00:00:00:00:00, 192.168.9.100:35091) IPv4 > TCP I don't even know where these messages come from.