]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
netfilter: nft_fwd_netdev: check ttl/hl before forwarding
authorFlorian Westphal <fw@strlen.de>
Thu, 9 Apr 2026 11:30:41 +0000 (13:30 +0200)
committerFlorian Westphal <fw@strlen.de>
Fri, 10 Apr 2026 10:16:27 +0000 (12:16 +0200)
commit1dfd95bdf4d18d263aa8fad06bfb9f4d9c992b18
tree7bb164fe03d84b9495c759ccb62abbe04e415486
parentf30e5a7291a879deeeb6b9ba92b12c9be1ee5f29
netfilter: nft_fwd_netdev: check ttl/hl before forwarding

Drop packets if their ttl/hl is too small for forwarding.

Fixes: d32de98ea70f ("netfilter: nft_fwd_netdev: allow to forward packets via neighbour layer")
Signed-off-by: Florian Westphal <fw@strlen.de>
net/netfilter/nft_fwd_netdev.c