Ubuntu
iptables package

  1. Bug #1949603
  2. Comment #2

Comment 2 for bug 1949603

Revision history for this message
Andrea Righi (arighi) wrote :

The debdiff in attach seems to solve the problem.

Without this fix applied:

$ sudo ./tools/testing/selftests/net/xfrm_policy.sh
PASS: policy before exception matches
FAIL: expected ping to .254 to fail (exceptions)
...

With this fix applied:

$ sudo ./tools/testing/selftests/net/xfrm_policy.sh
PASS: policy before exception matches
PASS: ping to .254 bypassed ipsec tunnel (exceptions)
...