On Fri, May 13, 2011 at 12:53:14PM -0700, Stephen Hemminger wrote: > The commit 6b1e960fdbd75dcd9bcc3ba5ff8898ff1ad30b6e > bridge: Reset IPCB when entering IP stack on NF_FORWARD > broke forwarding of IPV6 packets in bridge because it would > call bp_parse_ip_options with an IPV6 packet. > > Reported-by: Noah Meyerhans <noahm@xxxxxxxxxx> > Signed-off-by: Stephen Hemminger <shemminger@xxxxxxxxxx> > > --- > Patch against net-next-2.6 but must be applied to net-2.6 > and stable as well > > --- a/net/bridge/br_netfilter.c 2011-05-13 12:37:30.289646958 -0700 > +++ b/net/bridge/br_netfilter.c 2011-05-13 12:38:07.820333938 -0700 > @@ -737,7 +737,7 @@ static unsigned int br_nf_forward_ip(uns > nf_bridge->mask |= BRNF_PKT_TYPE; > } > > - if (br_parse_ip_options(skb)) > + if (pf == PF_INET && br_parse_ip_options(skb)) > return NF_DROP; > > /* The physdev module checks on this */ > I can confirm that this patch fixes the behavior I've been seeing in the stable-2.6.38.y tree. Thank you, Stephen! noah
Attachment:
signature.asc
Description: Digital signature
_______________________________________________ Bridge mailing list Bridge@xxxxxxxxxxxxxxxxxxxxxxxxxx https://lists.linux-foundation.org/mailman/listinfo/bridge
