From: Patrick McHardy <kaber@trash.net>
To: Kfir Lavi <lavi.kfir@gmail.com>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: Verdict with ebtables?
Date: Mon, 15 Nov 2010 10:39:41 +0100 [thread overview]
Message-ID: <4CE0FFDD.4090407@trash.net> (raw)
In-Reply-To: <AANLkTinobDP53eegFuhaQCds4TOb98YHWibf9P7L7_D4@mail.gmail.com>
On 14.11.2010 12:56, Kfir Lavi wrote:
> On Thu, Nov 11, 2010 at 12:48 PM, Patrick McHardy <kaber@trash.net> wrote:
>>
>> On 11.11.2010 11:05, Kfir Lavi wrote:
>>> Hi,
>>> It seems to me that its not possible to do a verdict in userspace of
>>> ethernet packets, like it is done with nfqueue and iptables.
>>> Why it is not implemented?
>>
>> Nobody ever implemented it. IIRC the main problem is that under
>> certain circumstances the packets need to be passed back to
>> __netif_receive_skb() when queuing in LOCAL_IN, which isn't
>> possible from the completion handler.
>
> Thanks Patrick for your replay.
> Can you explain why it's not possible to pass packets back?
Because the completion handler is executed asynchronously,
while the bridge receive functions are called directly from
__netif_receive_skb().
> Also, why should packets need to be sent back?
That's f.i. how the NF_BR_LOCAL_IN handler works for link-local
packets. Have a look at br_handle_frame().
prev parent reply other threads:[~2010-11-15 9:39 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <AANLkTinCazaFKSXnfGe2e0nnfeRorV7AHcadQaxGvWg+@mail.gmail.com>
2010-11-11 10:05 ` Verdict with ebtables? Kfir Lavi
2010-11-11 10:48 ` Patrick McHardy
2010-11-14 11:56 ` Kfir Lavi
2010-11-15 9:39 ` Patrick McHardy [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4CE0FFDD.4090407@trash.net \
--to=kaber@trash.net \
--cc=lavi.kfir@gmail.com \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).