kmod-oaf: drop relay packet

jjm2473 · Mar 14, 2024 · 3b8c7a4 · 3b8c7a4
1 parent 76077bd
commit 3b8c7a4
Showing 1 changed file with 4 additions and 2 deletions.
diff --git a/oaf/src/app_filter.c b/oaf/src/app_filter.c
@@ -1068,9 +1068,11 @@ u_int32_t app_filter_hook_gateway_handle(struct sk_buff *skb, struct net_device
 	if ((ct->mark & NF_MASK_BIT) == NF_MARK_BIT)
 		return NF_ACCEPT;
 
-	if (strncmp(dev->name, "br-lan", 6))
+	if (strncmp(dev->name, "br-lan", 6)) {
+		if ((ct->mark & NF_DROP_MARK) == NF_DROP_MARK)
+			return NF_DROP;
 		return NF_ACCEPT;
-
+	}
 	if (CTINFO2DIR(ctinfo) == IP_CT_DIR_REPLY)
 		return NF_ACCEPT;