diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c index 38654730230b2c7861591cd4db3c9dd07d242ac2..7d424fd270255f0443516c024a4f4212d53ee3de 100644 --- a/net/netfilter/nf_tables_api.c +++ b/net/netfilter/nf_tables_api.c @@ -291,6 +291,9 @@ static int nft_delrule_by_chain(struct nft_ctx *ctx) int err; list_for_each_entry(rule, &ctx->chain->rules, list) { + if (!nft_is_active_next(ctx->net, rule)) + continue; + err = nft_delrule(ctx, rule); if (err < 0) return err;