Phil Sutter c63f45b4a9 netfilter: nft_fib: Fix for rpath check with VRF devices ...

[ Upstream commit 2a8a7c0eaa ]

Analogous to commit b575b24b8e ("netfilter: Fix rpfilter
dropping vrf packets by mistake") but for nftables fib expression:
Add special treatment of VRF devices so that typical reverse path
filtering via 'fib saddr . iif oif' expression works as expected.

Fixes: f6d0cbcf09 ("netfilter: nf_tables: add fib expression")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2022-10-21 12:38:18 +02:00

..

ila

…

netfilter

netfilter: nft_fib: Fix for rpath check with VRF devices

2022-10-21 12:38:18 +02:00

addrconf_core.c

net: rename reference+tracking helpers

2022-06-09 21:52:55 -07:00

addrconf.c

bonding: add all node mcast address when slave up

2022-09-05 10:07:05 +01:00

addrlabel.c

…

af_inet6.c

ipv6: Fix crash when IPv6 is administratively disabled

2022-09-20 11:27:32 -07:00

ah6.c

…

anycast.c

…

calipso.c

…

datagram.c

net: annotate races around sk->sk_bound_dev_if

2022-05-16 10:31:05 +01:00

esp6_offload.c

esp: choose the correct inner protocol for GSO on inter address family tunnels

2022-10-21 12:38:04 +02:00

esp6.c

esp6: Fix spelling mistake

2022-07-04 10:20:11 +02:00

exthdrs_core.c

…

exthdrs_offload.c

…

exthdrs.c

net: ipv6: add skb drop reasons to TLV parse

2022-04-13 13:09:57 +01:00

fib6_notifier.c

…

fib6_rules.c

…

fou6.c

…

icmp.c

icmp: Fix data-races around sysctl_icmp_echo_enable_probe.

2022-07-13 12:56:49 +01:00

inet6_connection_sock.c

…

inet6_hashtables.c

ipv6: add READ_ONCE(sk->sk_bound_dev_if) in INET6_MATCH()

2022-05-16 10:31:06 +01:00

ioam6_iptunnel.c

…

ioam6.c

…

ip6_checksum.c

…

ip6_fib.c

…

ip6_flowlabel.c

…

ip6_gre.c

ip6_gre: use actual protocol to select xmit

2022-07-13 12:10:22 +01:00

ip6_icmp.c

…

ip6_input.c

tcp/udp: Make early_demux back namespacified.

2022-07-15 18:50:35 -07:00

ip6_offload.c

ipv6/gro: insert temporary HBH/jumbo header

2022-05-16 10:18:56 +01:00

ip6_offload.h

…

ip6_output.c

ipv6: do not use RT_TOS for IPv6 flowlabel

2022-08-09 22:19:21 -07:00

ip6_tunnel.c

ip6_tunnel: Fix the type of functions

2022-08-13 10:27:36 +01:00

ip6_udp_tunnel.c

…

ip6_vti.c

net: rename reference+tracking helpers

2022-06-09 21:52:55 -07:00

ip6mr.c

ipmr: Always call ip{,6}_mr_forward() from RCU read-side critical section

2022-09-20 08:22:15 -07:00

ipcomp6.c

…

ipv6_sockglue.c

net: Fix data-races around sysctl_optmem_max.

2022-08-24 13:46:57 +01:00

Kconfig

crypto: lib - make the sha1 library optional

2022-07-15 16:43:59 +08:00

Makefile

…

mcast_snoop.c

…

mcast.c

net: mld: fix reference count leak in mld_{query | report}_work()

2022-07-25 12:33:59 +01:00

mip6.c

…

ndisc.c

net: fix potential refcount leak in ndisc_router_discovery()

2022-08-15 11:40:28 +01:00

netfilter.c

netfilter: Use l3mdev flow key when re-routing mangled packets

2022-05-16 13:03:29 +02:00

output_core.c

…

ping.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2022-07-28 18:21:16 -07:00

proc.c

…

protocol.c

…

raw.c

raw: remove unused variables from raw6_icmp_error()

2022-06-22 18:48:08 -07:00

reassembly.c

…

route.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2022-07-14 15:27:35 -07:00

rpl_iptunnel.c

…

rpl.c

…

seg6_hmac.c

net: ipv6: unexport __init-annotated seg6_hmac_net_init()

2022-06-28 21:23:30 -07:00

seg6_iptunnel.c

seg6: add support for SRv6 H.L2Encaps.Red behavior

2022-07-29 12:14:03 +01:00

seg6_local.c

net: seg6: initialize induction variable to first valid array index

2022-08-05 19:34:54 -07:00

seg6.c

ipv6: sr: fix out-of-bounds read when setting HMAC data.

2022-09-05 10:33:34 +01:00

sit.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2022-06-30 16:31:00 -07:00

syncookies.c

tcp: Fix data-races around sysctl_tcp_syncookies.

2022-07-18 12:21:54 +01:00

sysctl_net_ipv6.c

net: sysctl: introduce sysctl SYSCTL_THREE

2022-05-03 10:15:06 +02:00

tcp_ipv6.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2022-07-28 18:21:16 -07:00

tcpv6_offload.c

…

tunnel6.c

…

udp_impl.h

net: remove noblock parameter from recvmsg() entities

2022-04-12 15:00:25 +02:00

udp_offload.c

…

udp.c

rxrpc: Fix ICMP/ICMP6 error handling

2022-09-01 11:42:12 +01:00

udplite.c

net: add per_cpu_fw_alloc field to struct proto

2022-06-10 16:21:26 -07:00

xfrm6_input.c

…

xfrm6_output.c

…

xfrm6_policy.c

net: rename reference+tracking helpers

2022-06-09 21:52:55 -07:00

xfrm6_protocol.c

…

xfrm6_state.c

…

xfrm6_tunnel.c

…