Re: [PATCH nf-next 0/5] netfilter: resolve fib+vrf issues

[Pablo Neira Ayuso <pablo@netfilter.org>]

Hi Florian,

On Thu, May 15, 2025 at 08:06:47PM +0200, Florian Westphal wrote:
> This series resolves various issues with the FIB expression
> when used with VRFs.
> 
> First patch adds 'fib type' tests.
> Second patch moves a VRF+fib test to nft_fib.sh where it belongs.
> 
> The 3rd patch fixes an inconistency where, in a VRF setup,
> ipv4 and ipv6 fib provide different results for the same address
> type (locally configured); this changes nft_fib_ipv6 to behave like ipv4.
> 
> 4th patch fixes l3mdev handling in FIB, especially 'fib type' insist
> a locally configured addess in the VRF is not local (result is
> 'unicast') unless the 'iif' keyword is given because of conditional
> initialisation of the .l3mdev member.
> 
> Last patch adds more type and oif fib tests for VRFs, both when incoming
> interface is part of a VRF and when its not.
> 
> I'm targetting nf-next because we're too late in this cycle.

Could you rebase and resubmit? This is causing interference:

commit 7c8b89ec506e35aea3565461c12c57142a452d35
Author:     Hangbin Liu <liuhangbin@gmail.com>
AuthorDate: Thu May 8 08:19:09 2025 +0000

    selftests: netfilter: remove rp_filter configuration
    
    Remove the rp_filter configuration in netfilter lib, as setup_ns already
    sets it appropriately by default

Thanks.