lk/linux-kernel-test
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

netfilter: nf_tables_bridge: update hook_mask to allow {pre,post}routing

Browse Source 
Fixes: 36d2af5 ("netfilter: nf_tables: allow to filter from prerouting and postrouting")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:
Pablo Neira Ayuso
2014-10-25 12:25:06 +02:00
parent 3d53666b40
commit 4d87716cd0
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
net/bridge/netfilter/nf_tables_bridge.c
View File

@@ -75,9 +75,11 @@ static const struct nf_chain_type filter_bridge = {
.type = NFT_CHAIN_T_DEFAULT, .type = NFT_CHAIN_T_DEFAULT,
.family = NFPROTO_BRIDGE, .family = NFPROTO_BRIDGE,
.owner = THIS_MODULE, .owner = THIS_MODULE,
.hook_mask = (1 << NF_BR_LOCAL_IN) | .hook_mask = (1 << NF_BR_PRE_ROUTING) |
(1 << NF_BR_LOCAL_IN) |
(1 << NF_BR_FORWARD) | (1 << NF_BR_FORWARD) |
(1 << NF_BR_LOCAL_OUT), (1 << NF_BR_LOCAL_OUT) |
(1 << NF_BR_POST_ROUTING),
}; };
static int __init nf_tables_bridge_init(void) static int __init nf_tables_bridge_init(void)