]> git.baikalelectronics.ru Git - kernel.git/commit
bridge: netfilter: Fix dropping packets that moving through bridge interface
authorArtur Molchanov <arturmolchanov@gmail.com>
Fri, 30 Dec 2016 16:46:36 +0000 (19:46 +0300)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 30 Dec 2016 17:22:50 +0000 (18:22 +0100)
commit6d4bf493be5262926919b1802220111cbb6a56ea
treef528c2e7938ac94e3a6d886958fcc22e6b144511
parente9fe108ede0b9b6d091f08ead49912c2e872ad54
bridge: netfilter: Fix dropping packets that moving through bridge interface

Problem:
br_nf_pre_routing_finish() calls itself instead of
br_nf_pre_routing_finish_bridge(). Due to this bug reverse path filter drops
packets that go through bridge interface.

User impact:
Local docker containers with bridge network can not communicate with each
other.

Fixes: b2c9c32de28e ("netfilter: bridge: add and use br_nf_hook_thresh")
Signed-off-by: Artur Molchanov <artur.molchanov@synesis.ru>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/bridge/br_netfilter_hooks.c