mirror of
https://github.com/checkpoint-restore/criu.git
synced 2026-01-23 10:16:41 +00:00
zdtm: socket-tcp-nft-nfconntrack: add a hook to the chain in nft case
Let's use hooked nft chain which actually affects packets.
Fixes: e5f4d8c6f ("test/nfconntrack: use nft or iptables-legacy")
Signed-off-by: Pavel Tikhomirov <ptikhomirov@virtuozzo.com>
This commit is contained in:
parent
afc0efcf78
commit
d2511707fa
1 changed files with 1 additions and 1 deletions
|
|
@ -92,7 +92,7 @@ int main(int argc, char **argv)
|
|||
|
||||
if (system("nft add table ip filter"))
|
||||
return 1;
|
||||
if (system("nft add chain ip filter INPUT"))
|
||||
if (system("nft 'add chain ip filter INPUT { type filter hook input priority 0 ; }'"))
|
||||
return 1;
|
||||
if (system("nft add rule ip filter INPUT iifname \"lo\" ip protocol tcp ct state new,established counter accept"))
|
||||
return 1;
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue