linux-stable.git/include/linux/netfilter_bridge.h, branch v2.6.30

net: replace __constant_{endian} uses in net headers

2009-02-15T06:58:35+00:00

Base versions handle constant folding now.  For headers exposed to
userspace, we must only expose the __ prefixed versions.

Signed-off-by: Harvey Harrison 
Signed-off-by: David S. Miller

[NETFILTER]: bridge: fix missing link layer headers on outgoing routed packets

2007-12-14T21:54:39+00:00

As reported by Damien Thebault, the double POSTROUTING hook invocation
fix caused outgoing packets routed between two bridges to appear without
a link-layer header. The reason for this is that we're skipping the
br_nf_post_routing hook for routed packets now and don't save the
original link layer header, but nevertheless tries to restore it on
output, causing corruption.

The root cause for this is that skb->nf_bridge has no clearly defined
lifetime and is used to indicate all kind of things, but that is
quite complicated to fix. For now simply don't touch these packets
and handle them like packets from any other device.

Tested-by: Damien Thebault 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: bridge netfilter: consolidate header pushing/pulling code

2007-05-03T10:36:16+00:00

Consolidate the common push/pull sequences into a few helper functions.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: bridge-nf: filter bridged IPv4/IPv6 encapsulated in pppoe traffic

2007-04-26T05:28:57+00:00

The attached patch by Michael Milner adds support for using iptables and
ip6tables on bridged traffic encapsulated in ppoe frames, similar to
what's already supported for vlan.

Signed-off-by: Michael Milner 
Signed-off-by: Bart De Schuymer 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: bridge-netfilter: remove deferred hooks

2006-12-14T00:54:25+00:00

Remove the deferred hooks and all related code as scheduled in
feature-removal-schedule.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[BRIDGE]: Annotations.

2006-12-03T05:22:56+00:00

Signed-off-by: Al Viro 
Signed-off-by: David S. Miller

[NETFILTER] bridge: simplify nf_bridge_pad

2006-09-22T22:18:31+00:00

Do some simple optimization on the nf_bridge_pad() function
and don't use magic constants. Eliminate a double call and
the #ifdef'd code for CONFIG_BRIDGE_NETFILTER.

Signed-off-by: Stephen Hemminger 
Signed-off-by: David S. Miller

[NETFILTER] bridge: code rearrangement for clarity

2006-09-22T22:18:30+00:00

Cleanup and rearrangement for better style and clarity:
	Split the function nf_bridge_maybe_copy_header into two pieces
	Move copy portion out of line.
	Use Ethernet header size macros.
	Use header file to handle CONFIG_NETFILTER_BRIDGE differences

Signed-off-by: Stephen Hemminger 
Signed-off-by: David S. Miller

[BRIDGE] netfilter: memory corruption fix

2006-08-27T03:28:30+00:00

The bridge-netfilter code will overwrite memory if there is not
headroom in the skb to save the header.  This first showed up when
using Xen with sky2 driver that doesn't allocate the extra space.

Signed-off-by: Stephen Hemminger 
Signed-off-by: David S. Miller

[NETFILTER]: include/linux/netfilter_bridge.h: header cleanup

2006-08-02T20:38:15+00:00

Header doesn't use anything from atomic.h.
It fixes headers_check warning:

include/linux/netfilter_bridge.h requires asm/atomic.h, which does not exist

Compile tested on
alpha     arm   i386-up  sparc    sparc64-up  x86_64
alpha-up  i386           sparc64  sparc-up    x86_64-up

Signed-off-by: Alexey Dobriyan 
Signed-off-by: David S. Miller