]> git.proxmox.com Git - mirror_ubuntu-disco-kernel.git/commit
netfilter: bridge: optionally set indev to vlan
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 8 May 2012 17:36:44 +0000 (19:36 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 8 May 2012 17:36:47 +0000 (19:36 +0200)
commit4981682cc19733f3ca43d3abd81dd4adbc9005d5
tree6c4583e26b8f12559defc11d0c141011a71e3de1
parentac3a546ac89fdf3c4b50e40039a5a7f6df4dda72
netfilter: bridge: optionally set indev to vlan

if net.bridge.bridge-nf-filter-vlan-tagged sysctl is enabled, bridge
netfilter removes the vlan header temporarily and then feeds the packet
to ip(6)tables.

When the new "bridge-nf-pass-vlan-input-device" sysctl is on
(default off), then bridge netfilter will also set the
in-interface to the vlan interface; if such an interface exists.

This is needed to make iptables REDIRECT target work with
"vlan-on-top-of-bridge" setups and to allow use of "iptables -i" to
match the vlan device name.

Also update Documentation with current brnf default settings.

Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: Bart De Schuymer <bdschuym@pandora.be>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Documentation/networking/ip-sysctl.txt
net/bridge/br_netfilter.c