Re: [PATCH net] netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev

2018-09-17 Thread Pablo Neira Ayuso
On Sun, Sep 16, 2018 at 09:14:42PM -0700, David Ahern wrote: > Pablo: > > DaveM has this marked as waiting for upstream. Any comment on this patch? Please, resend a Cc netfilter-de...@vger.kernel.org Thanks David.

Re: [PATCH net] netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev

2018-09-16 Thread David Ahern
Pablo: DaveM has this marked as waiting for upstream. Any comment on this patch? Thanks, David On 9/7/18 3:08 PM, dsah...@kernel.org wrote: > From: David Ahern > > For starters, the bridge netfilter code registers operations that > are invoked any time nh_hook is called. Specifically, ip_sabot

[PATCH net] netfilter: bridge: Don't sabotage nf_hook calls from an l3mdev

2018-09-07 Thread dsahern
From: David Ahern For starters, the bridge netfilter code registers operations that are invoked any time nh_hook is called. Specifically, ip_sabotage_in watches for nested calls for NF_INET_PRE_ROUTING when a bridge is in the stack. Packet wise, the bridge netfilter hook runs first. br_nf_pre_ro