Displaying 2 results from an estimated 2 matches for "dalegaard".
2016 Oct 28
2
[Bug 1096] New: Kernel oops when inserting an element into a map
...element into a map
Product: nftables
Version: unspecified
Hardware: x86_64
OS: other
Status: NEW
Severity: critical
Priority: P5
Component: kernel
Assignee: pablo at netfilter.org
Reporter: dalegaard at gmail.com
Created attachment 485
--> https://bugzilla.netfilter.org/attachment.cgi?id=485&action=edit
dmesg log from kernel oops
The following ruleset, when loaded with 'nft -f bad.txt', results in a kernel
oops:
----snip----
flush ruleset
table ip inlinenat {
map sourcemap...
2016 Nov 11
2
[Bug 1098] New: Stateless packet rewriting of source/destination IPs must update IP header as well
...t update IP header as well
Product: nftables
Version: unspecified
Hardware: x86_64
OS: All
Status: NEW
Severity: normal
Priority: P5
Component: nft
Assignee: pablo at netfilter.org
Reporter: dalegaard at gmail.com
Hi!
Currently a stateless packet rewrite like the following:
ip daddr set ip daddr map @destmap
... wil not work in practice because the TCP or UDP checksum is not updated.
The IP header is updated correctly, but there does not currently appear to be a
means to update the TCP or UDP...