{"id":812033,"url":"http://patchwork.ozlabs.org/api/patches/812033/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/patch/90185d38-8713-2a2a-6d47-c3db17f83dcb@gmail.com/","project":{"id":26,"url":"http://patchwork.ozlabs.org/api/projects/26/?format=json","name":"Netfilter Development","link_name":"netfilter-devel","list_id":"netfilter-devel.vger.kernel.org","list_email":"netfilter-devel@vger.kernel.org","web_url":null,"scm_url":null,"webscm_url":null,"list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<90185d38-8713-2a2a-6d47-c3db17f83dcb@gmail.com>","list_archive_url":null,"date":"2017-09-10T00:39:51","name":"xtables-compat-restore: fix translation of mangle's OUTPUT","commit_ref":null,"pull_url":null,"state":"accepted","archived":false,"hash":"f5c406271fe8e7f53f98481bc34b10a7b1bcc6e7","submitter":{"id":72337,"url":"http://patchwork.ozlabs.org/api/people/72337/?format=json","name":"Louis Sautier","email":"sautier.louis@gmail.com"},"delegate":{"id":6139,"url":"http://patchwork.ozlabs.org/api/users/6139/?format=json","username":"pablo","first_name":"Pablo","last_name":"Neira","email":"pablo@netfilter.org"},"mbox":"http://patchwork.ozlabs.org/project/netfilter-devel/patch/90185d38-8713-2a2a-6d47-c3db17f83dcb@gmail.com/mbox/","series":[{"id":2363,"url":"http://patchwork.ozlabs.org/api/series/2363/?format=json","web_url":"http://patchwork.ozlabs.org/project/netfilter-devel/list/?series=2363","date":"2017-09-10T00:39:51","name":"xtables-compat-restore: fix translation of mangle's OUTPUT","version":1,"mbox":"http://patchwork.ozlabs.org/series/2363/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/812033/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/812033/checks/","tags":{},"related":[],"headers":{"Return-Path":"","X-Original-To":"incoming@patchwork.ozlabs.org","Delivered-To":"patchwork-incoming@bilbo.ozlabs.org","Authentication-Results":["ozlabs.org;\n\tspf=none (mailfrom) smtp.mailfrom=vger.kernel.org\n\t(client-ip=209.132.180.67; helo=vger.kernel.org;\n\tenvelope-from=netfilter-devel-owner@vger.kernel.org;\n\treceiver=)","ozlabs.org;\n\tdkim=fail reason=\"signature verification failed\" (2048-bit key;\n\tunprotected) header.d=gmail.com header.i=@gmail.com\n\theader.b=\"bT19tEbT\"; dkim-atps=neutral"],"Received":["from vger.kernel.org (vger.kernel.org [209.132.180.67])\n\tby ozlabs.org (Postfix) with ESMTP id 3xqXJZ2KpCz9sRV\n\tfor ;\n\tSun, 10 Sep 2017 10:39:58 +1000 (AEST)","(majordomo@vger.kernel.org) by vger.kernel.org via listexpand\n\tid S1750788AbdIJAjz (ORCPT );\n\tSat, 9 Sep 2017 20:39:55 -0400","from mail-wm0-f50.google.com ([74.125.82.50]:47091 \"EHLO\n\tmail-wm0-f50.google.com\" rhost-flags-OK-OK-OK-OK) by vger.kernel.org\n\twith ESMTP id S1750742AbdIJAjy (ORCPT\n\t);\n\tSat, 9 Sep 2017 20:39:54 -0400","by mail-wm0-f50.google.com with SMTP id i189so20626867wmf.1\n\tfor ;\n\tSat, 09 Sep 2017 17:39:54 -0700 (PDT)","from ?IPv6:2a01:e34:ec13:b0:dacb:8aff:fe9a:3ce1?\n\t([2a01:e34:ec13:b0:dacb:8aff:fe9a:3ce1])\n\tby smtp.gmail.com with ESMTPSA id\n\t137sm5129492wmp.7.2017.09.09.17.39.52\n\tfor \n\t(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);\n\tSat, 09 Sep 2017 17:39:52 -0700 (PDT)"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=gmail.com; s=20161025;\n\th=to:from:subject:message-id:date:user-agent:mime-version;\n\tbh=1gmclv7tTUn/FUSDlMmnc66P16vJjvVh3GSVY04lSpM=;\n\tb=bT19tEbTYngq+1OV0k+ziskKBSDDsSJ+h8epXChAo7MdAxe/WZ1qCaQgHm+v+wT93B\n\t0J5IzC4Bmf3dh0T9lGukNNfluu5P2js1pQdisPN8z77+i851E0Ytro5ALEdhH9zun+jX\n\t/iXq7uNG8rEgQ+nrPBNSb+WO/HTpIjLyJbYFvFL/u8KwuaIm6808j03A1YRwoE6qMSZL\n\t3NW4j4xf6DhQcNwM0MWkGfsG+kqiaFMrkhMy2FOmx3ADxmzTLd6yDRNUc1++1OjyyUDr\n\tQHOu9uumoDHZNx/oh4mPoqVYsFzgk4yUF9leEUi6efimAFO8n3UUWCqDE9fwSpycZ6uu\n\te7ig==","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=1e100.net; s=20161025;\n\th=x-gm-message-state:to:from:subject:message-id:date:user-agent\n\t:mime-version;\n\tbh=1gmclv7tTUn/FUSDlMmnc66P16vJjvVh3GSVY04lSpM=;\n\tb=Ng0HJqf4L2Pw1KNO5K3/UxBjN3BtAnwA7Z/MMJpRQzmaafeOMqkXmDay1R3Coq+R7G\n\tWin9pc+xxB3u7m1EGnC4+s1efxEJuEMUEWQxj7l/ae6aZuylKEP51xi3sFbSeuSE6j42\n\tbO+bLagoyE1bwII8zYURlpal/moi6RTM0O9AqlMB2+Ws9XIXTt30GkOi3M078MavOCkj\n\thENXXkzEuwgXi8hTTB0PIFqXTPtPOtHn6dHH7ChmVyHyoiSNlg0k3FLFD6KHdvLqxLn1\n\t9FdvzgwQbEzfV124HhZ4d0nO+EPB/s04NSSP0kjIKB+TPNZOLMC35ctNt4KFGYRPzDDt\n\tY8og==","X-Gm-Message-State":"AHPjjUjICDKbsb/LpP0AkmKVriKv2qAA7sjJauTwgS3Nu1ZK/LvhVbft\n\tjnCab6hyd3GS8GZXX6M=","X-Google-Smtp-Source":"AOwi7QDaFKmzxlSWXAj6ZTL56wZCdyLgU7xb6BrNliGOo7DwSiTL2hVCIodqBqSiixVeW8VWdBYI5w==","X-Received":"by 10.28.14.138 with SMTP id 132mr71968wmo.7.1505003993163;\n\tSat, 09 Sep 2017 17:39:53 -0700 (PDT)","To":"netfilter-devel@vger.kernel.org","From":"Louis Sautier ","Subject":"[PATCH] xtables-compat-restore: fix translation of mangle's OUTPUT","Message-ID":"<90185d38-8713-2a2a-6d47-c3db17f83dcb@gmail.com>","Date":"Sun, 10 Sep 2017 02:39:51 +0200","User-Agent":"Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101\n\tThunderbird/52.3.0","MIME-Version":"1.0","Content-Type":"multipart/signed; micalg=pgp-sha256;\n\tprotocol=\"application/pgp-signature\";\n\tboundary=\"p8Vjqvil5K2ltdX5woUGQVUrqFcIarQux\"","Sender":"netfilter-devel-owner@vger.kernel.org","Precedence":"bulk","List-ID":"","X-Mailing-List":"netfilter-devel@vger.kernel.org"},"content":"Hello,\nI noticed that the iptables-restore-translate tool does not properly\ntranslate the OUTPUT chain from the mangle table. It creates a filter\nchain when it should be creating a route chain.\nHere is a rather simple patch that should fix the issue.\n\nPlease CC me, I'm not subscribed.\n\nKind regards,\n\nLouis","diff":"From 4eb328c7756044279243419dd3f116754f924a3e Mon Sep 17 00:00:00 2001\nFrom: Louis Sautier \nDate: Sun, 10 Sep 2017 02:13:18 +0200\nSubject: [PATCH] xtables-compat-restore: fix translation of mangle's OUTPUT\n chain\n\nThis chain should be translated as a route chain, not as a filter chain.\n---\n iptables/xtables-translate.c | 2 ++\n 1 file changed, 2 insertions(+)\n\ndiff --git a/iptables/xtables-translate.c b/iptables/xtables-translate.c\nindex 3e6c7051..4f6a9caf 100644\n--- a/iptables/xtables-translate.c\n+++ b/iptables/xtables-translate.c\n@@ -357,6 +357,8 @@ static int xlate_chain_set(struct nft_handle *h, const char *table,\n \n \tif (strcmp(table, \"nat\") == 0)\n \t\ttype = \"nat\";\n+\telse if (strcmp(table, \"mangle\") == 0 && strcmp(chain, \"OUTPUT\") == 0)\n+\t\ttype = \"route\";\n \n \tprintf(\"add chain %s %s %s { type %s \",\n \t family2str[h->family], table, chain, type);\n-- \n2.14.1\n\n","prefixes":[]}