projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 97772bc) | patch
netfilter: nf_tables: only allow in/output for arp packets
authorFlorian Westphal <fw@strlen.de>
Fri, 7 Jul 2017 11:29:03 +0000 (13:29 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 17 Jul 2017 15:02:44 +0000 (17:02 +0200)
commit974292defee033bc43ccfcb2fcefc3eba3905340
treef9865fb83ea6979a8f7ef02d10020af01090e3bbtree | snapshot
parent97772bcd56efa21d9d8976db6f205574ea602f51commit | diff
netfilter: nf_tables: only allow in/output for arp packets

arp packets cannot be forwarded.

They can be bridged, but then they can be filtered using
either ebtables or nftables bridge family.

The bridge netfilter exposes a "call-arptables" switch which
pushes packets into arptables, but lets not expose this for nftables, so better
close this asap.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/ipv4/netfilter/nf_tables_arp.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git