The debdiff in attach seems to solve the problem. Without this fix applied:
$ sudo ./tools/testing/selftests/net/xfrm_policy.sh PASS: policy before exception matches FAIL: expected ping to .254 to fail (exceptions) ... With this fix applied: $ sudo ./tools/testing/selftests/net/xfrm_policy.sh PASS: policy before exception matches PASS: ping to .254 bypassed ipsec tunnel (exceptions) ... ** Patch added: "iptables-nft-fix-counters.debdiff" https://bugs.launchpad.net/ubuntu/+source/iptables/+bug/1949603/+attachment/5537896/+files/iptables-nft-fix-counters.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1949603 Title: iptables-save -c shows incorrect counters with iptables-nft To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/iptables/+bug/1949603/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
