mirror of
https://github.com/checkpoint-restore/criu
synced 2025-08-22 09:58:09 +00:00
zdtm: socket-tcp-nft-nfconntrack: add a hook to the chain in nft case
Let's use hooked nft chain which actually affects packets. Fixes: e5f4d8c6f ("test/nfconntrack: use nft or iptables-legacy") Signed-off-by: Pavel Tikhomirov <ptikhomirov@virtuozzo.com>
This commit is contained in:
parent
afc0efcf78
commit
d2511707fa
@ -92,7 +92,7 @@ int main(int argc, char **argv)
|
||||
|
||||
if (system("nft add table ip filter"))
|
||||
return 1;
|
||||
if (system("nft add chain ip filter INPUT"))
|
||||
if (system("nft 'add chain ip filter INPUT { type filter hook input priority 0 ; }'"))
|
||||
return 1;
|
||||
if (system("nft add rule ip filter INPUT iifname \"lo\" ip protocol tcp ct state new,established counter accept"))
|
||||
return 1;
|
||||
|
Loading…
x
Reference in New Issue
Block a user