Florian Westphal da786717e0 netfilter: ip6t_rpfilter: set F_IFACE for linklocal addresses
Roman reports that DHCPv6 client no longer sees replies from server
due to

ip6tables -t raw -A PREROUTING -m rpfilter --invert -j DROP

rule.  We need to set the F_IFACE flag for linklocal addresses, they
are scoped per-device.

Fixes: 47b7e7f82802 ("netfilter: don't set F_IFACE on ipv6 fib lookups")
Reported-by: Roman Mamedov <rm@romanrm.net>
Tested-by: Roman Mamedov <rm@romanrm.net>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2018-08-16 19:36:58 +02:00
..
2018-07-24 14:10:42 -07:00
2018-03-27 13:18:09 -04:00
2018-05-11 00:10:56 +02:00
2018-08-01 21:32:30 -07:00
2018-06-22 13:43:27 +09:00
2018-07-24 14:10:43 -07:00
2018-05-16 07:24:30 +02:00
2018-06-22 13:43:27 +09:00