Revision f83a7ea2075ca896f2dbf07672bac9cf3682ff74 authored by Florian Westphal on 17 April 2013, 22:45:24 UTC, committed by Pablo Neira Ayuso on 18 April 2013, 22:11:59 UTC
Alex Efros reported rpfilter module doesn't match following packets:
IN=br.qemu SRC=192.168.2.1 DST=192.168.2.255 [ .. ]
(netfilter bugzilla #814).

Problem is that network stack arranges for the locally generated broadcasts
to appear on the interface they were sent out, so the IFF_LOOPBACK check
doesn't trigger.

As -m rpfilter is restricted to PREROUTING, we can check for existing
rtable instead, it catches locally-generated broad/multicast case, too.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
1 parent 5add189
History
File Mode Size
Makefile -rw-r--r-- 383 bytes
generic_mpih-add1.c -rw-r--r-- 2.0 KB
generic_mpih-lshift.c -rw-r--r-- 2.1 KB
generic_mpih-mul1.c -rw-r--r-- 1.9 KB
generic_mpih-mul2.c -rw-r--r-- 1.9 KB
generic_mpih-mul3.c -rw-r--r-- 1.9 KB
generic_mpih-rshift.c -rw-r--r-- 2.1 KB
generic_mpih-sub1.c -rw-r--r-- 2.0 KB
longlong.h -rw-r--r-- 39.5 KB
mpi-bit.c -rw-r--r-- 1.5 KB
mpi-cmp.c -rw-r--r-- 1.7 KB
mpi-inline.h -rw-r--r-- 3.3 KB
mpi-internal.h -rw-r--r-- 7.8 KB
mpi-pow.c -rw-r--r-- 8.3 KB
mpicoder.c -rw-r--r-- 6.2 KB
mpih-cmp.c -rw-r--r-- 2.0 KB
mpih-div.c -rw-r--r-- 5.8 KB
mpih-mul.c -rw-r--r-- 14.2 KB
mpiutil.c -rw-r--r-- 2.6 KB

back to top