nftables does not work correctly on big endian systems without this patch:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=10596608c4d62cb8c1c2b806debcbd32fe657e71
With nftables v0.8.1 this rule does not work:
nft add rule ip foo bar ct state new tcp dport 22 accept
I can set it successfully, but it will just not match to port 22.
The examples from this tutorial will not work with kernel 4.9 + nftables
v0.8.1:
https://people.netfilter.org/pablo/nft-tutorial.pdf
This nftables commit broke nftables for me on my MIPS BE system:
https://git.netfilter.org/nftables/commit/?id=0825c57d571bb7121e7048e198b9b023f7e7f358
but the root cause is in the kernel.
I would like to get commit 10596608c4d62cb8c1c2b806debcbd32fe657e71
("netfilter: nf_tables: fix mismatch in big-endian system") backported
to kernel 4.9 or even earlier to make nftable work correctly on big
endian systems.
Hauke
