Re: [RFC] bridge: add netfilter hook for forwarding 802.1D group addresses
From: Bart De Schuymer <hidden>
Date: 2011-08-20 15:31:04
Also in:
bridge, netfilter-devel
Op 19/08/2011 22:58, Stephen Hemminger schreef:
quoted hunk ↗ jump to hunk
Signed-off-by: Stephen Hemminger<redacted> --- include/linux/netfilter_bridge.h | 5 ++++- net/bridge/br_input.c | 15 ++++++++++++--- net/bridge/netfilter/ebtable_filter.c | 18 ++++++++++++++++-- 3 files changed, 32 insertions(+), 6 deletions(-)--- a/include/linux/netfilter_bridge.h 2011-08-19 13:11:51.972125670 -0700 +++ b/include/linux/netfilter_bridge.h 2011-08-19 13:13:36.452130443 -0700@@ -22,7 +22,10 @@ #define NF_BR_POST_ROUTING 4 /* Not really a hook, but used for the ebtables broute table */ #define NF_BR_BROUTING 5 -#define NF_BR_NUMHOOKS 6 +/* Packets to link local multicast addresses (01-80-C2-00-00-XX) */ +#define NF_BR_LINK_LOCAL_IN 6 + +#define NF_BR_NUMHOOKS 7
You will need to make sure you don't break backwards compatibility with the ebtables userspace tool. ebtables.h::struct ebt_replace is a structure used for communication between userspace and the kernel. It has the member hook_entry defined like this: struct ebt_entries __user *hook_entry[NF_BR_NUMHOOKS]; cheers, Bart -- Bart De Schuymer www.artinalgorithms.be