Re: [PATCH nf] netfilter: bridge: add support for ppoe filtering

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Tue, Nov 23, 2021 at 12:50:31PM +0100, Florian Westphal wrote:
> This makes 'bridge-nf-filter-pppoe-tagged' sysctl work for
> bridged traffic.
> 
> Looking at the original commit it doesn't appear this ever worked:
> 
>  static unsigned int br_nf_post_routing(unsigned int hook, struct sk_buff **pskb,
> [..]
>         if (skb->protocol == htons(ETH_P_8021Q)) {
>                 skb_pull(skb, VLAN_HLEN);
>                 skb->network_header += VLAN_HLEN;
> +       } else if (skb->protocol == htons(ETH_P_PPP_SES)) {
> +               skb_pull(skb, PPPOE_SES_HLEN);
> +               skb->network_header += PPPOE_SES_HLEN;
>         }
>  [..]
> 	NF_HOOK(... POST_ROUTING, ...)
> 
> ... but the adjusted offsets are never restored.
> 
> The alternative would be to rip this code out for good,
> but otoh we'd have to keep this anyway for the vlan handling
> (which works because vlan tag info is in the skb, not the packet
>  payload).

If this has never worked (day 0), then I'm inclined to apply this to
nf-next.

Applied, thanks



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux