[NETFILTER]: bridge: fix double POSTROUTING hook invocation Packets routed between bridges have the POST_ROUTING hook invoked twice since bridging mistakes them for bridged packets because they have skb->nf_bridge set. Signed-off-by: Patrick McHardy <kaber@xxxxxxxxx> --- commit 87a1cd0a4fc1f5ac17e2e752668ae324c595b1fd tree 38c7fdb13f7232bf77fb78ce4292a4bb1cdd5dfd parent c94ac2cb9896fbed3065dc08216a7d13b98f0d92 author Patrick McHardy <kaber@xxxxxxxxx> Tue, 13 Nov 2007 11:24:18 +0100 committer Patrick McHardy <kaber@xxxxxxxxx> Tue, 13 Nov 2007 11:24:18 +0100 net/bridge/br_netfilter.c | 3 +++ 1 files changed, 3 insertions(+), 0 deletions(-) diff --git a/net/bridge/br_netfilter.c b/net/bridge/br_netfilter.c index da22f90..c1757c7 100644 --- a/net/bridge/br_netfilter.c +++ b/net/bridge/br_netfilter.c @@ -766,6 +766,9 @@ static unsigned int br_nf_post_routing(unsigned int hook, struct sk_buff *skb, if (!nf_bridge) return NF_ACCEPT; + if (!(nf_bridge->mask & (BRNF_BRIDGED | BRNF_BRIDGED_DNAT))) + return NF_ACCEPT; + if (!realoutdev) return NF_DROP; - To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
