netfilter: nft_fib: allow from forward/input without iif selector
authorEric Garver <eric@garver.life>
Tue, 21 May 2024 14:25:05 +0000 (10:25 -0400)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 28 May 2024 22:37:51 +0000 (00:37 +0200)
commite8ded22ef0f4831279c363c264cd41cd9d59ca9e
treeeeb97430e1b373448d6763a8357ac18577fc643d
parent21a673bddc8fd4873c370caf9ae70ffc6d47e8d3
netfilter: nft_fib: allow from forward/input without iif selector

This removes the restriction of needing iif selector in the
forward/input hooks for fib lookups when requested result is
oif/oifname.

Removing this restriction allows "loose" lookups from the forward hooks.

Fixes: be8be04e5ddb ("netfilter: nft_fib: reverse path filter for policy-based routing on iif")
Signed-off-by: Eric Garver <eric@garver.life>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_fib.c