diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c index 62363c77b816666f916aa4dc7a1a61bc90c65555..4c51b6c0ed612fa98de8727eaf581bb8e6a47f83 100644 --- a/net/netfilter/nf_tables_api.c +++ b/net/netfilter/nf_tables_api.c @@ -291,6 +291,9 @@ static int nft_delrule_by_chain(struct nft_ctx *ctx) int err; list_for_each_entry(rule, &ctx->chain->rules, list) { + if (!nft_is_active_next(ctx->net, rule)) + continue; + err = nft_delrule(ctx, rule); if (err < 0) return err;