On 16-06-13 08:21 AM, Daniel Borkmann wrote:
Looks like nft_meta_set_eval() can already do that, but restricted via pkt_type_ok(), so we can't play bad games with PACKET_LOOPBACK et al. Wasn't aware of that. Hm, so if you want to make use of this from tc as well, probably it makes sense to add a generic helper as in skb_pkt_type_mangle() and place it into skbuff.h?
Ok, will do with next update. cheers, jamal
