Re: 6.6.57-stable regression: "netfilter: xtables: avoid NFPROTO_UNSPEC where needed" broke NFLOG on IPv6

Hi,

On Sat, Oct 19, 2024 at 10:22:01PM -0700, Krzysztof Olędzki wrote:

Hi,

After upgrading to 6.6.57 I noticed that my IPv6 firewall config failed to load.

Quick investigation flagged NFLOG to be the issue:

# ip6tables -I INPUT -j NFLOG Warning: Extension NFLOG revision 0 not supported, missing kernel module? ip6tables: No chain/target/match by that name.

The regression is caused by the following commit: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git/c...

Yes, this is the proposed incremental fix.

https://patchwork.ozlabs.org/project/netfilter-devel/patch/20241020124951.18...