Revision f83a7ea2075ca896f2dbf07672bac9cf3682ff74 authored by Florian Westphal on 17 April 2013, 22:45:24 UTC, committed by Pablo Neira Ayuso on 18 April 2013, 22:11:59 UTC
Alex Efros reported rpfilter module doesn't match following packets:
IN=br.qemu SRC=192.168.2.1 DST=192.168.2.255 [ .. ]
(netfilter bugzilla #814).

Problem is that network stack arranges for the locally generated broadcasts
to appear on the interface they were sent out, so the IFF_LOOPBACK check
doesn't trigger.

As -m rpfilter is restricted to PREROUTING, we can check for existing
rtable instead, it catches locally-generated broad/multicast case, too.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
1 parent 5add189
History
File Mode Size
Kconfig -rw-r--r-- 3.7 KB
Makefile -rw-r--r-- 832 bytes
b43_pci_bridge.c -rw-r--r-- 1.8 KB
driver_chipcommon.c -rw-r--r-- 17.8 KB
driver_chipcommon_pmu.c -rw-r--r-- 20.5 KB
driver_chipcommon_sflash.c -rw-r--r-- 3.3 KB
driver_extif.c -rw-r--r-- 5.0 KB
driver_gige.c -rw-r--r-- 7.3 KB
driver_gpio.c -rw-r--r-- 5.2 KB
driver_mipscore.c -rw-r--r-- 8.3 KB
driver_pcicore.c -rw-r--r-- 18.4 KB
embedded.c -rw-r--r-- 6.3 KB
main.c -rw-r--r-- 33.9 KB
pci.c -rw-r--r-- 34.2 KB
pcihost_wrapper.c -rw-r--r-- 2.7 KB
pcmcia.c -rw-r--r-- 19.5 KB
scan.c -rw-r--r-- 10.4 KB
sdio.c -rw-r--r-- 15.6 KB
sprom.c -rw-r--r-- 5.2 KB
ssb_private.h -rw-r--r-- 7.5 KB

back to top