| commit | 21c086b83b8f8b9b22dace2bdcf11f2cecfc512f | [log] [tgz] |
|---|---|---|
| author | Yuxiao Zhang <yuxiaozhang@google.com> | Wed Jun 21 10:23:53 2023 -0700 |
| committer | Yuxiao Zhang <yuxiaozhang@google.com> | Wed Jun 21 23:00:47 2023 +0000 |
| tree | c39c8eb628507b5e05d4f80083551713b9ba263f | |
| parent | 461115122ebc8bdcb9598934f940a19a4d64a7cf [diff] |
meta-google: gbmc-bridge: Fix nftable rule set Seems that nftable cannot jump to a chain that doesn't in its own file. Change-Id: I4d8c0cd804afddaae7ae5e94b5db1266b149fb55 Signed-off-by: Yuxiao Zhang <yuxiaozhang@google.com>
diff --git a/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br-cn-redirect.rules b/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br-cn-redirect.rules index 61e8b44..e0bae57 100644 --- a/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br-cn-redirect.rules +++ b/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br-cn-redirect.rules
@@ -22,9 +22,3 @@ tcp sport 10168 tcp sport set 10166 notrack } } - -table inet filter { - chain gbmc_br_redir_input { - mark 0xff drop - } -}
diff --git a/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br.rules b/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br.rules index 5bc58f0..72dde39 100644 --- a/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br.rules +++ b/meta-google/recipes-google/networking/gbmc-bridge/50-gbmc-br.rules
@@ -12,8 +12,8 @@ chain gbmc_br_input { type filter hook input priority 0; policy drop; iifname != gbmcbr accept + mark 0xff drop ct state established accept - jump gbmc_br_redir_input jump gbmc_br_int_input jump gbmc_br_pub_input reject @@ -35,3 +35,4 @@ ip6 nexthdr icmpv6 accept } } +