Revision f83a7ea2075ca896f2dbf07672bac9cf3682ff74 authored by Florian Westphal on 17 April 2013, 22:45:24 UTC, committed by Pablo Neira Ayuso on 18 April 2013, 22:11:59 UTC
Alex Efros reported rpfilter module doesn't match following packets: IN=br.qemu SRC=192.168.2.1 DST=192.168.2.255 [ .. ] (netfilter bugzilla #814). Problem is that network stack arranges for the locally generated broadcasts to appear on the interface they were sent out, so the IFF_LOOPBACK check doesn't trigger. As -m rpfilter is restricted to PREROUTING, we can check for existing rtable instead, it catches locally-generated broad/multicast case, too. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
1 parent 5add189
| File | Mode | Size |
|---|---|---|
| amcc | ||
| caam | ||
| nx | ||
| ux500 | ||
| Kconfig | -rw-r--r-- | 10.8 KB |
| Makefile | -rw-r--r-- | 1.0 KB |
| atmel-aes-regs.h | -rw-r--r-- | 2.0 KB |
| atmel-aes.c | -rw-r--r-- | 27.5 KB |
| atmel-sha-regs.h | -rw-r--r-- | 1.2 KB |
| atmel-sha.c | -rw-r--r-- | 25.7 KB |
| atmel-tdes-regs.h | -rw-r--r-- | 2.6 KB |
| atmel-tdes.c | -rw-r--r-- | 29.5 KB |
| bfin_crc.c | -rw-r--r-- | 19.1 KB |
| geode-aes.c | -rw-r--r-- | 13.6 KB |
| geode-aes.h | -rw-r--r-- | 1.6 KB |
| hifn_795x.c | -rw-r--r-- | 76.7 KB |
| ixp4xx_crypto.c | -rw-r--r-- | 36.8 KB |
| mv_cesa.c | -rw-r--r-- | 29.0 KB |
| mv_cesa.h | -rw-r--r-- | 3.8 KB |
| n2_asm.S | -rw-r--r-- | 1.7 KB |
| n2_core.c | -rw-r--r-- | 52.4 KB |
| n2_core.h | -rw-r--r-- | 6.1 KB |
| omap-aes.c | -rw-r--r-- | 29.2 KB |
| omap-sham.c | -rw-r--r-- | 44.8 KB |
| padlock-aes.c | -rw-r--r-- | 15.0 KB |
| padlock-sha.c | -rw-r--r-- | 15.9 KB |
| picoxcell_crypto.c | -rw-r--r-- | 53.1 KB |
| picoxcell_crypto_regs.h | -rw-r--r-- | 5.1 KB |
| s5p-sss.c | -rw-r--r-- | 17.6 KB |
| talitos.c | -rw-r--r-- | 80.0 KB |
| talitos.h | -rw-r--r-- | 13.5 KB |
| tegra-aes.c | -rw-r--r-- | 27.3 KB |
| tegra-aes.h | -rw-r--r-- | 4.2 KB |
Computing file changes ...
