Re: [PATCH] bridge: make bridge-nf-call-*tables default configurable | KernelTrap

Re: [PATCH] bridge: make bridge-nf-call-*tables default configurable

view
thread

!MAILaRCHIVE_VOTE_RePLACE

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

[view in full thread]

From: Patrick McHardy <kaber@...>

To: Herbert Xu <herbert@...>

Cc: Jan Engelhardt <jengelh@...>, David Miller <davem@...>, <markmc@...>, <netdev@...>, <netfilter-devel@...>

Subject: Re: [PATCH] bridge: make bridge-nf-call-*tables default configurable

Date: Wednesday, July 1, 2009 - 5:01 am

Herbert Xu wrote:
quoted text> On Tue, Jun 30, 2009 at 10:16:35PM +0200, Jan Engelhardt wrote:
>> It makes sense absolutely. Consider:
>>
>> * packet enters bridge
>> * NF_HOOK(PF_INET6, NF_INET_PRE_ROUTING, ...) is called by nr_netfilter.c
>> * (connection tracking entry is set up)
>> * let bridging decision be "local delivery"
> 
> No, my question is does it ever make sense to use conntrack as
> part of bridge netfilter.  That is, do you ever want to test it
> in your rules that are run as part of bridge netfilter.

Probably not, but thats not how its used currently. The packets are
passed to IP netfilter, which performs connection tracking. I'm not
sure how we could avoid the negative effects while still allowing this.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:

[PATCH] bridge: make bridge-nf-call-*tables default configur..., Mark McLoughlin, (Tue Jun 30, 12:27 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Patrick McHardy, (Wed Jul 1, 4:56 am)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., David Miller, (Tue Jun 30, 11:16 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Mark McLoughlin, (Wed Jul 1, 6:45 am)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., David Miller, (Wed Jul 1, 12:02 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Herbert Xu, (Wed Jul 1, 12:26 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Patrick McHardy, (Wed Jul 1, 6:51 am)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., David Miller, (Wed Jul 1, 12:02 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Patrick McHardy, (Wed Jul 1, 12:05 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Mark Smith, (Wed Jul 1, 5:18 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., David Miller, (Wed Jul 1, 12:08 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Herbert Xu, (Tue Jun 30, 1:00 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Patrick McHardy, (Wed Jul 1, 4:57 am)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Herbert Xu, (Wed Jul 1, 5:07 am)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Patrick McHardy, (Wed Jul 1, 5:21 am)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Herbert Xu, (Wed Jul 1, 12:33 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Patrick McHardy, (Wed Jul 1, 1:01 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., David Miller, (Tue Jun 30, 3:06 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Jan Engelhardt, (Tue Jun 30, 4:16 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Herbert Xu, (Tue Jun 30, 9:15 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Patrick McHardy, (Wed Jul 1, 5:01 am)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Jan Engelhardt, (Tue Jun 30, 11:50 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Ben Greear, (Wed Jul 1, 12:14 am)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Herbert Xu, (Wed Jul 1, 12:10 am)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Mark Smith, (Tue Jun 30, 4:57 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Herbert Xu, (Tue Jun 30, 9:48 pm)

Re: [PATCH] bridge: make bridge-nf-call-*tables default conf..., Jan Engelhardt, (Tue Jun 30, 5:30 pm)

Navigation

Popular discussions


linux-kernel:
Greg Kroah-Hartman	[PATCH 002/196] Chinese: rephrase English introduction in HOWTO
david	Re: Dual-Licensing Linux Kernel with GPL V2 and GPL V3
Jan Engelhardt	intel iommu (Re: -mm merge plans for 2.6.23)
Andi Kleen	Re: [PATCH] x86: Construct 32 bit boot time page tables in native format.
openbsd-misc:

linux-netdev:
Gerrit Renker	[PATCH 27/37] dccp: Integration of dynamic feature activation - part 2 (server side)
Jarek Poplawski	Re: Possible regression in HTB
Natalie Protasevich	[BUG] New Kernel Bugs
Jarek Poplawski	Re: [PATCH] pkt_sched: Destroy gen estimators under rtnl_lock().
git:

Colocation donated by:

Who's online

There are currently 2 users and 634 guests online.

Online users

Syndicate