]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nft_reject_bridge: enable reject with bridge vlan
authorMichael Braun <michael-dev@fami-braun.de>
Wed, 6 May 2020 09:46:25 +0000 (11:46 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 25 May 2020 18:39:05 +0000 (20:39 +0200)
commit216876ade462ed936ec857d23d0672fc478b4272
treeeead8fa92f2ddec0e10cb609546a83ccf43b2a37
parentc8ab71acbf43feabb34dc012976b41b031f1a9ef
netfilter: nft_reject_bridge: enable reject with bridge vlan

Currently, using the bridge reject target with tagged packets
results in untagged packets being sent back.

Fix this by mirroring the vlan id as well.

Fixes: cdd4e1fbf95a ("netfilter: bridge: add reject support")
Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/bridge/netfilter/nft_reject_bridge.c