diff options
author | Hangbin Liu <liuhangbin@gmail.com> | 2016-07-05 20:55:36 +0800 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-07-11 12:16:01 +0200 |
commit | 47c74456257d2e50ace8c473d358cf4b9c0a912f (patch) | |
tree | 518b1a2fc76e0f69d2925bdae5066120aa343aae /scripts | |
parent | 870190a9ec9075205c0fa795a09fa931694a3ff1 (diff) |
netfilter: physdev: physdev-is-out should not work with OUTPUT chain
physdev_mt() will check skb->nf_bridge first, which was alloced in
br_nf_pre_routing. So if we want to use --physdev-out and physdev-is-out,
we need to match it in FORWARD or POSTROUTING chain. physdev_mt_check()
only checked physdev-out and missed physdev-is-out. Fix it and update the
debug message to make it clearer.
Signed-off-by: Hangbin Liu <liuhangbin@gmail.com>
Reviewed-by: Marcelo R Leitner <marcelo.leitner@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'scripts')
0 files changed, 0 insertions, 0 deletions