[Bridge] The problem of bridge+netfilter+nat

[bdschuym at pandora.be (Bart De Schuymer)]

Op do, 24-03-2005 te 16:25 +0800, schreef Zheng Chuanbo:
> Hi,
> 
> Thanks for reply.
> 
> There is no dhcp client on our firewall. I tried to get rid of the problem
> by blocking broadcast packets with the command below,
> 
> iptables -I FORWARD -d 192.168.0.255 -j DROP
> 
> But it still remained the same. So is there any quick solutions to that?
> Thanks.

Upgrade to a recent kernel or change net/core/dev.c::handle_bridge()
so that it looks like this (add the PACKET_LOOPBACK stuff):
	if ((*pskb)->pkt_type == PACKET_LOOPBACK ||
	    (port = rcu_dereference((*pskb)->dev->br_port)) == NULL)
		return 0;

cheers,
Bart