aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv6/netfilter
diff options
context:
space:
mode:
authorJulian Anastasov <ja@ssi.bg>2014-04-28 10:51:56 +0300
committerDavid S. Miller <davem@davemloft.net>2014-04-28 14:47:03 -0400
commite374c618b1465f0292047a9f4c244bd71ab5f1f0 (patch)
treeb6eab50bf0d9bf655128edf7f13c5359c806a215 /net/ipv6/netfilter
parentnet: sctp: Don't transition to PF state when transport has exhausted 'Path.Max.Retrans'. (diff)
downloadlinux-dev-e374c618b1465f0292047a9f4c244bd71ab5f1f0.tar.xz
linux-dev-e374c618b1465f0292047a9f4c244bd71ab5f1f0.zip
net: ipv6: more places need LOOPBACK_IFINDEX for flowi6_iif
To properly match iif in ip rules we have to provide LOOPBACK_IFINDEX in flowi6_iif, not 0. Some ip6mr_fib_lookup and fib6_rule_lookup callers need such fix. Signed-off-by: Julian Anastasov <ja@ssi.bg> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6/netfilter')
-rw-r--r--net/ipv6/netfilter/ip6t_rpfilter.c1
1 files changed, 1 insertions, 0 deletions
diff --git a/net/ipv6/netfilter/ip6t_rpfilter.c b/net/ipv6/netfilter/ip6t_rpfilter.c
index e0983f3648a6..790e0c6b19e1 100644
--- a/net/ipv6/netfilter/ip6t_rpfilter.c
+++ b/net/ipv6/netfilter/ip6t_rpfilter.c
@@ -33,6 +33,7 @@ static bool rpfilter_lookup_reverse6(const struct sk_buff *skb,
struct ipv6hdr *iph = ipv6_hdr(skb);
bool ret = false;
struct flowi6 fl6 = {
+ .flowi6_iif = LOOPBACK_IFINDEX,
.flowlabel = (* (__be32 *) iph) & IPV6_FLOWINFO_MASK,
.flowi6_proto = iph->nexthdr,
.daddr = iph->saddr,