On Tue, Apr 10, 2012 at 10:42:16AM +0200, Florian Westphal wrote: > if net.bridge.bridge-nf-filter-vlan-tagged sysctl is enabled, bridge > netfilter removes the vlan header temporarily and then feeds the packet > to ip(6)tables. > > When the new "bridge-nf-pass-vlan-input-device" sysctl is on > (default off), then bridge netfilter will also set the > in-interface to the vlan interface; if such an interface exists. > > This is needed to make iptables REDIRECT target work with > "vlan-on-top-of-bridge" setups and to allow use of "iptables -i" to > match the vlan device name. > > Also update Documentation with current brnf default settings. > > Signed-off-by: Florian Westphal <fw@xxxxxxxxx> Finally applied, thanks Florian. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
