Update linux integration code to re-create the nfqueues on failure

2020-12-14 09:42:04 +01:00
parent 7bd94d13d2
commit 44e1b97c30
2 changed files with 113 additions and 47 deletions
--- a/firewall/interception/nfq/packet.go
+++ b/firewall/interception/nfq/packet.go
@@ -96,7 +96,7 @@ func (pkt *packet) setMark(mark int) error {
 	}()

 	for {
-		if err := pkt.queue.nf.SetVerdictWithMark(pkt.pktID, nfqueue.NfAccept, mark); err != nil {
+		if err := pkt.queue.getNfq().SetVerdictWithMark(pkt.pktID, nfqueue.NfAccept, mark); err != nil {
 			// embedded interface is required to work-around some
 			// dep-vendoring weirdness
 			if opErr, ok := err.(interface {