]> git.proxmox.com Git - mirror_ubuntu-kernels.git/commit
netfilter: nf_tables: fix bidirectional offload regression
authorFelix Fietkau <nbd@nbd.name>
Wed, 14 Feb 2024 14:42:35 +0000 (15:42 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 14 Feb 2024 23:20:00 +0000 (00:20 +0100)
commit84443741faab9045d53f022a9ac6a6633067a481
tree5812ca30be397c72527fd10216d1d39edb124d09
parent0f1ae2821fa4b13ab0f5ad7ff89fa57efcb04fe0
netfilter: nf_tables: fix bidirectional offload regression

Commit 8f84780b84d6 ("netfilter: flowtable: allow unidirectional rules")
made unidirectional flow offload possible, while completely ignoring (and
breaking) bidirectional flow offload for nftables.
Add the missing flag that was left out as an exercise for the reader :)

Cc: Vlad Buslov <vladbu@nvidia.com>
Fixes: 8f84780b84d6 ("netfilter: flowtable: allow unidirectional rules")
Reported-by: Daniel Golle <daniel@makrotopia.org>
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_flow_offload.c