Revision f83a7ea2075ca896f2dbf07672bac9cf3682ff74 authored by Florian Westphal on 17 April 2013, 22:45:24 UTC, committed by Pablo Neira Ayuso on 18 April 2013, 22:11:59 UTC
Alex Efros reported rpfilter module doesn't match following packets:
IN=br.qemu SRC=192.168.2.1 DST=192.168.2.255 [ .. ]
(netfilter bugzilla #814).

Problem is that network stack arranges for the locally generated broadcasts
to appear on the interface they were sent out, so the IFF_LOOPBACK check
doesn't trigger.

As -m rpfilter is restricted to PREROUTING, we can check for existing
rtable instead, it catches locally-generated broad/multicast case, too.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
1 parent 5add189
History
File Mode Size
power
regmap
Kconfig -rw-r--r-- 10.3 KB
Makefile -rw-r--r-- 862 bytes
attribute_container.c -rw-r--r-- 12.0 KB
base.h -rw-r--r-- 4.8 KB
bus.c -rw-r--r-- 31.3 KB
class.c -rw-r--r-- 15.2 KB
core.c -rw-r--r-- 51.2 KB
cpu.c -rw-r--r-- 8.2 KB
dd.c -rw-r--r-- 15.7 KB
devres.c -rw-r--r-- 18.2 KB
devtmpfs.c -rw-r--r-- 8.8 KB
dma-buf.c -rw-r--r-- 14.4 KB
dma-coherent.c -rw-r--r-- 5.9 KB
dma-contiguous.c -rw-r--r-- 9.9 KB
dma-mapping.c -rw-r--r-- 6.6 KB
driver.c -rw-r--r-- 5.9 KB
firmware.c -rw-r--r-- 614 bytes
firmware_class.c -rw-r--r-- 35.6 KB
hypervisor.c -rw-r--r-- 544 bytes
init.c -rw-r--r-- 714 bytes
isa.c -rw-r--r-- 3.7 KB
map.c -rw-r--r-- 3.3 KB
memory.c -rw-r--r-- 18.0 KB
module.c -rw-r--r-- 1.9 KB
node.c -rw-r--r-- 18.5 KB
pinctrl.c -rw-r--r-- 1.6 KB
platform.c -rw-r--r-- 30.3 KB
soc.c -rw-r--r-- 4.1 KB
syscore.c -rw-r--r-- 3.0 KB
topology.c -rw-r--r-- 5.2 KB
transport_class.c -rw-r--r-- 9.4 KB

back to top