David Newall reported that bridge causes bad checksums: http://thread.gmane.org/gmane.linux.network/315705/focus=1706769 The proposal was to revert 462fb2af9788a82a5 (bridge : Sanitize skb before it enters the IP stack). However, this has some other adverse effects since bridge netfilter and ip stack both use skb->cb (and we thus memset skb->cb whenever we hand skb off to the ip stack). So, this series attemps to resolve this a bit differently. First, lets add the inet_param padding that Eric suggested previously. This means that any earlier setup of IPCB will be preserved inside the bridge layer. This is also useful for netfilter since it will preserve IPCB(skb)->frag_max_size set up by ip defrag. Second, this gets rid of the option parsing/memset calls in to forward and output cases. Third, the pre-routing path is changed to not mangle the packets but to only validate the ip options. This patch series is vs. next instead of net/nf tree. This has been broken for so long that I don't think we need to rush this. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
