Re: [PATCH nft 1/3] netlink_delinerize: remove network header dep for reject statement also in bridge family

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Jun 18, 2019 at 08:43:57PM +0200, Florian Westphal wrote:
> add rule bridge test-bridge input reject with icmp type ...
> 
> is shown as
> 
> ether type ip reject type ...
> 
> i.e., the dependency is not removed.
> 
> Allow dependency removal -- this adds a problem where some icmp types
> will be shortened to 'reject', losing the icmp ipv4 dependency.
> 
> Next patch resolves this problem by disabling short-hand abbreviations
> for bridge reject statements.
> 
> Signed-off-by: Florian Westphal <fw@xxxxxxxxx>

Acked-by: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux