Florian Westphal 6f8f132cc7 netfilter: Use flowlabel flow key when re-routing mangled packets
'ip6 dscp set $v' in an nftables outpute route chain has no effect.
While nftables does detect the dscp change and calls the reroute hook.
But ip6_route_me_harder never sets the dscp/flowlabel:
flowlabel/dsfield routing rules are ignored and no reroute takes place.

Thanks to Yi Chen for an excellent reproducer script that I used
to validate this change.

Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2")
Reported-by: Yi Chen <yiche@redhat.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2024-06-11 18:46:04 +02:00
..
2024-06-03 18:50:09 -07:00
2024-03-07 21:12:43 -08:00
2024-05-06 19:14:56 -07:00
2024-04-29 13:32:01 +01:00
2024-04-29 13:32:01 +01:00
2024-04-29 13:32:01 +01:00
2024-04-29 13:32:01 +01:00
2023-10-27 10:35:46 +01:00
2023-09-14 16:16:36 +02:00
2024-03-08 10:56:05 +00:00