lgcosta/pf-linux-port
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: skb->mark masks were multi-bit (IN mark matched OUT test) - transit traffic never reached the out ruleset; ingress/egress interface groups; pfctl resolves (egress) pool locally

Browse Source
This commit is contained in:
lgcosta committed 2026-11-11 20:15:35 -03:00
1 parent c449e01b9a
commit 9c3c4b6bbc
3 files changed
+85 -3
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

module/pfsrc/pfk_hooks.c
+2 -2
View File
@@ -35,8 +35,8 @@ struct pfk_pkt {
int dir;
};
#define PFK_DONE_IN 0x50460010u /* skb->mark bit: PF_IN pass completed */
#define PFK_DONE_OUT 0x50460020u /* skb->mark bit: PF_OUT pass completed */
#define PFK_DONE_IN 0x00000001u /* skb->mark bit: PF_IN pass completed */
#define PFK_DONE_OUT 0x00000002u /* skb->mark bit: PF_OUT pass completed */
static void
pfk_pkt_reinject(struct pfk_pkt *pk)