Florian Westphal 2a7851bffb
netfilter: add nf_ipv6_ops hook to fix xt_addrtype with IPv6 ...
Quoting https://bugzilla.netfilter.org/show_bug.cgi?id=812 :
[ ip6tables -m addrtype ]
When I tried to use in the nat/PREROUTING it messes up the
routing cache even if the rule didn't matched at all.
[..]
If I remove the --limit-iface-in from the non-working scenario, so just
use the -m addrtype --dst-type LOCAL it works!
This happens when LOCAL type matching is requested with --limit-iface-in,
and the default ipv6 route is via the interface the packet we test
arrived on.
Because xt_addrtype uses ip6_route_output, the ipv6 routing implementation
creates an unwanted cached entry, and the packet won't make it to the
real/expected destination.
Silently ignoring --limit-iface-in makes the routing work but it breaks
rule matching (--dst-type LOCAL with limit-iface-in is supposed to only
match if the dst address is configured on the incoming interface;
without --limit-iface-in it will match if the address is reachable
via lo).
The test should call ipv6_chk_addr() instead. However, this would add
a link-time dependency on ipv6.
There are two possible solutions:
1) Revert the commit that moved ipt_addrtype to xt_addrtype,
and put ipv6 specific code into ip6t_addrtype.
2) add new "nf_ipv6_ops" struct to register pointers to ipv6 functions.
While the former might seem preferable, Pablo pointed out that there
are more xt modules with link-time dependeny issues regarding ipv6,
so lets go for 2).
Signed-off-by: Florian Westphal <fw@strlen.de >
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org >
2013-05-23 11:58:55 +02:00
2013-03-29 09:20:05 -07:00
2013-05-17 14:31:05 -04:00
2013-05-02 11:58:41 -05:00
2013-05-04 12:31:18 -07:00
2013-04-08 16:36:23 +02:00
2013-04-30 09:36:50 -07:00
2013-05-05 17:36:20 -07:00
2013-04-11 03:39:00 -07:00
2013-05-05 17:36:20 -07:00
2013-05-11 16:12:44 -07:00
2013-05-06 15:41:42 -07:00
2013-05-09 10:15:46 -07:00
2013-04-29 20:09:03 +02:00
2013-04-19 15:45:05 +02:00
2013-05-09 13:05:24 -07:00
2013-04-16 17:38:10 -07:00
2013-04-28 02:13:43 +01:00
2013-05-13 18:27:18 +04:00
2013-04-23 14:09:39 -04:00
2013-04-29 16:23:34 -04:00
2013-05-08 13:13:29 -07:00
2013-04-15 22:04:10 +05:30
2013-04-12 00:31:18 +02:00
2013-04-30 15:21:02 -07:00
2013-05-07 19:46:02 -07:00
2013-04-03 19:33:40 -04:00
2013-05-07 22:27:15 -04:00
2013-04-01 19:08:06 -07:00
2013-04-10 23:41:16 +02:00
2013-04-29 15:40:23 -04:00
2013-03-23 14:26:34 -07:00
2013-05-08 10:13:35 -07:00
2013-05-08 10:13:35 -07:00
2013-04-18 09:00:26 -07:00
2013-04-29 15:54:39 -07:00
2013-05-15 14:42:15 -07:00
2013-05-01 08:04:12 -07:00
2013-04-14 10:06:31 -07:00
2013-03-23 16:11:31 -07:00
2013-05-07 20:16:25 -07:00
2013-04-30 17:04:01 -07:00
2013-03-22 15:18:18 -07:00
2013-04-12 11:22:35 -07:00
2013-04-10 16:33:53 -07:00
2013-04-30 15:21:02 -07:00
2013-05-02 09:03:55 -07:00
2013-03-20 13:23:21 -04:00
2013-05-09 13:46:38 -04:00
2013-04-29 18:28:13 -07:00
2013-04-08 17:28:34 +02:00
2013-04-29 18:28:13 -07:00
2013-04-27 09:25:59 +08:00
2013-04-08 17:39:23 +02:00
2013-04-02 15:24:00 +02:00
2013-05-11 15:23:17 -07:00
2013-05-01 17:51:54 -07:00
2013-04-29 18:28:19 -07:00
2013-04-29 15:54:27 -07:00
2013-04-02 01:28:41 +02:00
2013-05-10 14:37:17 +01:00
2013-05-01 13:20:04 -07:00
2013-05-01 16:36:22 +05:30
2013-05-02 21:52:26 +05:30
2013-04-30 17:04:02 -07:00
2013-03-22 22:18:09 -06:00
2013-03-28 10:10:25 -06:00
2013-04-30 16:03:10 +01:00
2013-05-07 18:38:27 -07:00
2013-03-27 13:48:25 +01:00
2013-04-29 18:28:40 -07:00
2013-03-18 21:00:35 +09:00
2013-05-01 17:31:42 -04:00
2013-05-01 16:28:48 -04:00
2013-03-31 11:38:33 -07:00
2013-04-30 17:04:00 -07:00
2013-03-27 07:49:29 -07:00
2013-05-07 02:16:31 -04:00
2013-04-29 18:28:41 -07:00
2013-05-09 20:14:25 -04:00
2013-05-09 20:10:22 -04:00
2013-04-29 18:28:13 -07:00
2013-04-11 10:00:05 +08:00
2013-04-16 18:47:14 +09:00
2013-03-18 10:21:23 +01:00
2013-04-30 10:09:06 +02:00
2013-05-06 13:07:33 +02:00
2013-03-22 16:19:59 -07:00
2013-04-29 15:54:38 -07:00
2013-05-07 18:38:27 -07:00
2013-04-29 15:54:26 -07:00
2013-04-02 07:07:32 +02:00
2013-04-02 07:06:17 +02:00
2013-04-29 13:54:36 -04:00
2013-05-08 11:51:05 -07:00
2013-04-16 15:29:45 +02:00
2013-03-26 12:32:13 -04:00
2013-04-21 15:56:59 -04:00
2013-03-27 13:48:25 +01:00
2013-03-27 13:48:25 +01:00
2013-05-02 12:10:19 +02:00
2013-04-29 15:54:37 -07:00
2013-05-01 08:12:58 -07:00
2013-03-22 16:41:19 -07:00
2013-04-19 17:49:23 -04:00
2013-04-25 15:25:23 +02:00
2013-03-22 16:20:00 -07:00
2013-04-12 00:03:42 -04:00
2013-04-29 15:42:02 -04:00
2013-05-05 10:58:06 -07:00
2013-04-17 12:35:33 -07:00
2013-04-30 17:04:06 -07:00
2013-04-08 17:28:34 +02:00
2013-05-07 16:09:00 -07:00
2013-04-30 17:04:02 -07:00
2013-04-19 16:39:13 -04:00
2013-05-05 14:47:31 -07:00
2013-04-07 13:05:35 +03:00
2013-04-01 11:04:50 -07:00
2013-04-03 19:33:43 -04:00
2013-05-05 10:58:06 -07:00
2013-03-22 22:17:36 -06:00
2013-04-30 19:13:05 +02:00
2013-04-15 14:06:39 +00:00
2013-04-08 16:57:15 -07:00
2013-04-29 15:54:37 -07:00
2013-04-30 17:04:00 -07:00
2013-05-07 18:38:26 -07:00
2013-03-28 17:45:51 -07:00
2013-04-30 09:36:50 -07:00
2013-03-29 08:35:47 -07:00
2013-03-27 07:50:04 -07:00
2013-04-23 09:50:30 -06:00
2013-04-19 09:33:36 +02:00
2013-03-22 10:25:15 -04:00
2013-04-29 18:28:44 -07:00
2013-05-02 07:34:58 -07:00
2013-05-16 15:02:01 -07:00
2013-05-23 11:58:55 +02:00
2013-04-05 21:08:11 +02:00
2013-04-19 14:57:58 -04:00
2013-05-01 15:00:24 -04:00
2013-04-14 12:59:28 -04:00
2013-04-08 22:12:33 -04:00
2013-05-06 17:24:22 -04:00
2013-04-29 15:54:36 -07:00
2013-05-04 14:47:26 -04:00
2013-05-08 09:55:05 -04:00
2013-05-02 21:50:38 +05:30
2013-04-02 16:43:09 -04:00
2013-05-07 11:22:14 -07:00
2013-03-29 17:54:33 -07:00
2013-04-29 15:54:28 -07:00
2013-04-19 22:25:51 +02:00
2013-04-17 10:21:17 -06:00
2013-05-02 07:32:24 -07:00
2013-04-12 16:52:01 -06:00
2013-04-17 10:21:17 -06:00
2013-04-17 10:21:17 -06:00
2013-05-01 14:08:52 -07:00
2013-04-17 10:21:17 -06:00
2013-05-02 17:54:19 +02:00
2013-05-07 20:16:25 -07:00
2013-04-09 14:13:02 -04:00
2013-03-29 09:14:16 -07:00
2013-03-19 09:47:30 +01:00
2013-05-05 13:23:27 -07:00
2013-04-16 18:51:16 -07:00
2013-04-09 10:48:33 -07:00
2013-04-30 17:04:02 -07:00
2013-05-01 17:29:47 -04:00
2013-05-01 17:29:39 -04:00
2013-04-09 14:13:35 -04:00
2013-04-03 21:50:00 -07:00
2013-04-29 15:54:28 -07:00
2013-05-07 18:38:27 -07:00
2013-05-02 17:54:19 +02:00
2013-03-27 13:03:39 +00:00
2013-04-30 17:04:09 -07:00
2013-04-07 14:06:17 +03:00
2013-04-29 19:14:20 -07:00
2013-04-12 10:26:23 +02:00
2013-04-12 10:26:23 +02:00
2013-04-29 18:28:22 -07:00
2013-03-23 15:53:52 -07:00
2013-05-02 19:40:34 -07:00
2013-05-11 14:29:11 -07:00
2013-04-09 13:19:39 -04:00
2013-04-30 16:27:51 -07:00
2013-04-09 14:13:29 -04:00
2013-04-11 13:14:36 -07:00
2013-03-29 15:31:30 -04:00
2013-05-01 17:51:54 -07:00
2013-04-19 14:57:57 -04:00
2013-05-06 09:24:16 +03:00
2013-04-30 17:04:03 -07:00
2013-04-29 13:21:30 -04:00
2013-04-09 10:48:33 -07:00
2013-03-25 10:39:40 -07:00
2013-04-30 17:04:03 -07:00
2013-04-30 15:50:12 +05:30
2013-04-29 15:54:38 -07:00
2013-04-17 12:35:32 -07:00
2013-03-21 11:47:51 -04:00
2013-03-29 18:10:22 -06:00
2013-05-09 09:40:49 -07:00
2013-04-22 20:29:07 +02:00
2013-03-22 16:19:59 -07:00
2013-04-04 13:18:31 -07:00
2013-04-25 21:01:45 +08:00
2013-04-04 13:18:14 -07:00
2013-03-18 16:14:55 -07:00
2013-05-11 14:29:11 -07:00
2013-04-19 00:40:07 +02:00
2013-04-15 21:23:03 +01:00
2013-03-20 12:10:38 -04:00
2013-04-13 15:31:58 +02:00
2013-03-28 11:10:22 -07:00
2013-03-27 07:50:08 -07:00
2013-03-21 15:17:40 +00:00
2013-03-20 14:06:06 +10:30
2013-03-20 14:00:41 +10:30
2013-05-02 14:14:04 -07:00
2013-04-29 15:54:34 -07:00
2013-04-29 15:54:38 -07:00
2013-04-29 15:54:37 -07:00
2013-03-20 14:06:05 +10:30
2013-05-07 18:38:28 -07:00
2013-04-30 17:04:02 -07:00
2013-05-07 20:16:25 -07:00
2a7851bffb