]> git.ipfire.org Git - thirdparty/nftables.git/commit
tests: py: objects.t: must use input, not output
authorFlorian Westphal <fw@strlen.de>
Tue, 7 Oct 2025 10:48:49 +0000 (12:48 +0200)
committerFlorian Westphal <fw@strlen.de>
Tue, 7 Oct 2025 11:14:37 +0000 (13:14 +0200)
commit6b71d114912cd269416f232c0f0ec2fcc42eb58f
treecde0ec92322776246935ae58d4d8d929b1423253
parent12c31bc2a822437d026b0cd83143d45808971404
tests: py: objects.t: must use input, not output

synproxy must never be used in output rules, doing so results in kernel
crash due to infinite recursive calls back to nf_hook_slow() for the
emitted reply packet.

Up until recently kernel lacked this validation, and now that the kernel
rejects this the test fails.  Use input to make this pass again.

A new test to ensure we reject synproxy in ouput should be added
in the near future.

Signed-off-by: Florian Westphal <fw@strlen.de>
Reviewed-by: Pablo Neira Ayuso <pablo@netfilter.org>
tests/py/ip/objects.t
tests/py/ip/objects.t.payload