Re: [PATCH] netfilter: physdev: physdev-is-out should not work with OUTPUT chain

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Jul 06, 2016 at 11:22:32AM +0200, Pablo Neira Ayuso wrote:
> On Tue, Jul 05, 2016 at 06:00:12PM -0300, Marcelo Ricardo Leitner wrote:
> > On Tue, Jul 05, 2016 at 08:55:36PM +0800, Hangbin Liu wrote:
> > > physdev_mt() will check skb->nf_bridge first, which was alloced in
> > > br_nf_pre_routing. So if we want to use --physdev-out and physdev-is-out,
> > > we need to match it in FORWARD or POSTROUTING chain. physdev_mt_check()
> > > only checked physdev-out and missed physdev-is-out. Fix it and update the
> > > debug message to make it clearer.
> > > 
> > > Signed-off-by: Hangbin Liu <liuhangbin@xxxxxxxxx>
> > 
> > Reviewed-by: Marcelo R Leitner <marcelo.leitner@xxxxxxxxx>
> 
> Applied, thanks.

I have a batch ready for David now, so will be placing this in the
next batch actually.

Don't worry if you don't see this in the next pull request I'm going
to send.
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux