Displaying 1 result from an estimated 1 matches for "relational_expr_pctx_update".
2023 Jun 02
3
[Bug 1686] New: Transparent proxy support requires transport protocol match
...angle; policy accept;
meta l4proto { tcp, udp } tproxy to :1088 mark set 0x1 accept
}
}
This script works.
I check source and I found that:
https://git.netfilter.org/nftables/tree/src/expression.c#n748
> ...
> else if (right->etype == EXPR_SET) {
> ...
This `relational_expr_pctx_update` function only handle EXPR_SET, but
not EXPR_SET_REF,
which leads to fucntion `stmt_evaluate_tproxy` failing at
https://git.netfilter.org/nftables/tree/src/evaluate.c#n3859
because of `pctx->protocol[PROTO_BASE_TRANSPORT_HDR].desc` unset.
"""
--
You are receiving this mail bec...