backport of "netfilter: nf_tables: fix mismatch in big-endian system" to stable
From: Hauke Mehrtens <hauke@hauke-m.de>
Date: 2018-01-20 20:02:58
nftables does not work correctly on big endian systems without this patch: https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=10596608c4d62cb8c1c2b806debcbd32fe657e71 With nftables v0.8.1 this rule does not work: nft add rule ip foo bar ct state new tcp dport 22 accept I can set it successfully, but it will just not match to port 22. The examples from this tutorial will not work with kernel 4.9 + nftables v0.8.1: https://people.netfilter.org/pablo/nft-tutorial.pdf This nftables commit broke nftables for me on my MIPS BE system: https://git.netfilter.org/nftables/commit/?id=0825c57d571bb7121e7048e198b9b023f7e7f358 but the root cause is in the kernel. I would like to get commit 10596608c4d62cb8c1c2b806debcbd32fe657e71 ("netfilter: nf_tables: fix mismatch in big-endian system") backported to kernel 4.9 or even earlier to make nftable work correctly on big endian systems. Hauke