On Mon, Feb 16, 2015 at 06:57:53PM +0100, Florian Westphal wrote: > bridge reject handling is not straightforward, there are many subtle > differences depending on configuration. > > skb->dev is either the bridge port (PRE_ROUTING) or the bridge > itself (INPUT), so we need to use indev instead. > > Also, checksum validation will only work reliably if we trim skb > according to the l3 header size. > > While at it, add csum validation for ipv6 and skip existing tests > if skb was already checked e.g. by GRO. Also applied, thanks Florian. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
