]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nft_reject_bridge: enable reject with bridge vlan
authorMichael Braun <michael-dev@fami-braun.de>
Wed, 6 May 2020 09:46:25 +0000 (11:46 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 25 May 2020 18:39:05 +0000 (20:39 +0200)
commitf65806d696f5bf197456243e7ffadafd616f8683
treeeead8fa92f2ddec0e10cb609546a83ccf43b2a37
parent2d12d0dfcbf951bc1cda180a944e18419c8fe944
netfilter: nft_reject_bridge: enable reject with bridge vlan

Currently, using the bridge reject target with tagged packets
results in untagged packets being sent back.

Fix this by mirroring the vlan id as well.

Fixes: f9dcd412ff73 ("netfilter: bridge: add reject support")
Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/bridge/netfilter/nft_reject_bridge.c