|
 |
8ff5ad |
From 1fe92af5a03608b94e8e1e2ff26e24adfe2ea09a Mon Sep 17 00:00:00 2001
|
|
|
8ff5ad |
From: Phil Sutter <psutter@redhat.com>
|
|
|
8ff5ad |
Date: Fri, 21 Jan 2022 12:35:39 +0100
|
|
|
8ff5ad |
Subject: [PATCH] evaluate: fix inet nat with no layer 3 info
|
|
|
8ff5ad |
|
|
|
8ff5ad |
Bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2030773
|
|
|
8ff5ad |
Upstream Status: nftables commit 9a36033ce5063
|
|
|
8ff5ad |
|
|
|
8ff5ad |
commit 9a36033ce50638a403d1421935cdd1287ee5de6b
|
|
|
8ff5ad |
Author: Pablo Neira Ayuso <pablo@netfilter.org>
|
|
|
8ff5ad |
Date: Tue Jul 20 18:59:44 2021 +0200
|
|
|
8ff5ad |
|
|
|
8ff5ad |
evaluate: fix inet nat with no layer 3 info
|
|
|
8ff5ad |
|
|
|
8ff5ad |
nft currently reports:
|
|
|
8ff5ad |
|
|
|
8ff5ad |
Error: Could not process rule: Protocol error
|
|
|
8ff5ad |
add rule inet x y meta l4proto tcp dnat to :80
|
|
|
8ff5ad |
^^^^
|
|
|
8ff5ad |
|
|
|
8ff5ad |
default to NFPROTO_INET family, otherwise kernel bails out EPROTO when
|
|
|
8ff5ad |
trying to load the conntrack helper.
|
|
|
8ff5ad |
|
|
|
8ff5ad |
Closes: https://bugzilla.netfilter.org/show_bug.cgi?id=1428
|
|
|
8ff5ad |
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
|
|
|
8ff5ad |
---
|
|
|
8ff5ad |
src/evaluate.c | 5 +++--
|
|
|
8ff5ad |
1 file changed, 3 insertions(+), 2 deletions(-)
|
|
|
8ff5ad |
|
|
|
8ff5ad |
diff --git a/src/evaluate.c b/src/evaluate.c
|
|
|
8ff5ad |
index 9381f23..e495faf 100644
|
|
|
8ff5ad |
--- a/src/evaluate.c
|
|
|
8ff5ad |
+++ b/src/evaluate.c
|
|
|
8ff5ad |
@@ -2757,9 +2757,10 @@ static int nat_evaluate_family(struct eval_ctx *ctx, struct stmt *stmt)
|
|
|
8ff5ad |
stmt->nat.family = ctx->pctx.family;
|
|
|
8ff5ad |
return 0;
|
|
|
8ff5ad |
case NFPROTO_INET:
|
|
|
8ff5ad |
- if (!stmt->nat.addr)
|
|
|
8ff5ad |
+ if (!stmt->nat.addr) {
|
|
|
8ff5ad |
+ stmt->nat.family = NFPROTO_INET;
|
|
|
8ff5ad |
return 0;
|
|
|
8ff5ad |
-
|
|
|
8ff5ad |
+ }
|
|
|
8ff5ad |
if (stmt->nat.family != NFPROTO_UNSPEC)
|
|
|
8ff5ad |
return 0;
|
|
|
8ff5ad |
|
|
|
8ff5ad |
--
|
|
|
8ff5ad |
2.31.1
|
|
|
8ff5ad |
|