Re: [PATCH] net: ICMPv6 packets transmitted on wrong interface if nfmark is mangled
From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: 2012-12-03 23:52:25
Also in:
netfilter-devel
From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: 2012-12-03 23:52:25
Also in:
netfilter-devel
On Tue, Dec 04, 2012 at 12:38:25AM +0100, Jan Engelhardt wrote:
On Monday 2012-12-03 22:31, Dries De Winter wrote:quoted
Not fixing this means that skb->mark is unavailable for use on ICMPv6 packets because it will inevitably put those packets on the wrong interface. [...] I use skb->mark for QoS, not for routing so I don't expect the outgoing interface to be affected by my markers.Why would it do that, if one has no routes joined to a fwmark NNN routing rule?
iptables_mangle assumes that ip_route_me_harder needs to be called if the mark has changed.