]> git.baikalelectronics.ru Git - kernel.git/commit
bridge: netfilter: Fix dropping packets that moving through bridge interface
authorArtur Molchanov <arturmolchanov@gmail.com>
Fri, 30 Dec 2016 16:46:36 +0000 (19:46 +0300)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 30 Dec 2016 17:22:50 +0000 (18:22 +0100)
commit06920306ff84c3497ea8bf8bb65753b06fe2553b
treef528c2e7938ac94e3a6d886958fcc22e6b144511
parent6d9697089997ba2c3ab082e1f8eb2b59e07f27b4
bridge: netfilter: Fix dropping packets that moving through bridge interface

Problem:
br_nf_pre_routing_finish() calls itself instead of
br_nf_pre_routing_finish_bridge(). Due to this bug reverse path filter drops
packets that go through bridge interface.

User impact:
Local docker containers with bridge network can not communicate with each
other.

Fixes: dbddbf4a9aa3 ("netfilter: bridge: add and use br_nf_hook_thresh")
Signed-off-by: Artur Molchanov <artur.molchanov@synesis.ru>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/bridge/br_netfilter_hooks.c