From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 66874C433F5 for ; Wed, 6 Oct 2021 15:03:04 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [23.128.96.18]) by mail.kernel.org (Postfix) with ESMTP id 4F6DE60FDC for ; Wed, 6 Oct 2021 15:03:04 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S239171AbhJFPEz (ORCPT ); Wed, 6 Oct 2021 11:04:55 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:45658 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S239183AbhJFPEz (ORCPT ); Wed, 6 Oct 2021 11:04:55 -0400 Received: from Chamillionaire.breakpoint.cc (Chamillionaire.breakpoint.cc [IPv6:2a0a:51c0:0:12e:520::1]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id E357EC061753 for ; Wed, 6 Oct 2021 08:03:02 -0700 (PDT) Received: from fw by Chamillionaire.breakpoint.cc with local (Exim 4.92) (envelope-from ) id 1mY8Rh-0002W2-Da; Wed, 06 Oct 2021 17:03:01 +0200 Date: Wed, 6 Oct 2021 17:03:01 +0200 From: Florian Westphal To: Eugene Crosser Cc: Florian Westphal , netfilter-devel@vger.kernel.org, Jinpu Wang Subject: Re: In raw prerouting, `iif` matches different interfaces in different kernels when enslaved in a vrf Message-ID: <20211006150301.GA7393@breakpoint.cc> References: <17326577-1ab7-aaaa-0911-13ee131bdee0@average.org> <20211002185036.GJ2935@breakpoint.cc> <026e1d28-c76c-fab8-7766-98ad126dbd49@average.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <026e1d28-c76c-fab8-7766-98ad126dbd49@average.org> User-Agent: Mutt/1.10.1 (2018-07-13) Precedence: bulk List-ID: X-Mailing-List: netfilter-devel@vger.kernel.org Eugene Crosser wrote: > > Now I am trying to bisect upstream kernel. > > It looks like Jinpu Wang has found the offending > commit, it's 09e856d54bda5f28 "vrf: Reset skb conntrack connection on VRF > rcv" from Aug 15 2021. This change is very recent, you reported failure between 5.4 and 5.10, or was that already backported? This change doesn't influcence matching either, but it does zap the ct zone association afaics.