From mboxrd@z Thu Jan 1 00:00:00 1970 From: Bart De Schuymer Subject: Re: [RFC] bridge: add netfilter hook for forwarding 802.1D group addresses Date: Sat, 20 Aug 2011 17:31:04 +0200 Message-ID: <4E4FD338.5080100@pandora.be> References: <20110812154545.79d8313f@nehalam.ftrdhcpuser.net> <20110815150501.3a6cc432@nehalam.ftrdhcpuser.net> <20110818081019.4b9bb79e@nehalam.ftrdhcpuser.net> <20110818093941.5ebf716b@nehalam.ftrdhcpuser.net> <20110819022731.GC180151@jupiter.n2.diac24.net> <20110819135810.1a529ab2@nehalam.ftrdhcpuser.net> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Cc: David Lamparter , Nick Carter , Ed Swierk , netdev@vger.kernel.org, bridge@linux-foundation.org, netfilter-devel@vger.kernel.org To: Stephen Hemminger Return-path: Received: from gerard.telenet-ops.be ([195.130.132.48]:39856 "EHLO gerard.telenet-ops.be" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752507Ab1HTPbK (ORCPT ); Sat, 20 Aug 2011 11:31:10 -0400 In-Reply-To: <20110819135810.1a529ab2@nehalam.ftrdhcpuser.net> Sender: netfilter-devel-owner@vger.kernel.org List-ID: Op 19/08/2011 22:58, Stephen Hemminger schreef: > Signed-off-by: Stephen Hemminger > > --- > include/linux/netfilter_bridge.h | 5 ++++- > net/bridge/br_input.c | 15 ++++++++++++--- > net/bridge/netfilter/ebtable_filter.c | 18 ++++++++++++++++-- > 3 files changed, 32 insertions(+), 6 deletions(-) > > --- a/include/linux/netfilter_bridge.h 2011-08-19 13:11:51.972125670 -0700 > +++ b/include/linux/netfilter_bridge.h 2011-08-19 13:13:36.452130443 -0700 > @@ -22,7 +22,10 @@ > #define NF_BR_POST_ROUTING 4 > /* Not really a hook, but used for the ebtables broute table */ > #define NF_BR_BROUTING 5 > -#define NF_BR_NUMHOOKS 6 > +/* Packets to link local multicast addresses (01-80-C2-00-00-XX) */ > +#define NF_BR_LINK_LOCAL_IN 6 > + > +#define NF_BR_NUMHOOKS 7 > You will need to make sure you don't break backwards compatibility with the ebtables userspace tool. ebtables.h::struct ebt_replace is a structure used for communication between userspace and the kernel. It has the member hook_entry defined like this: struct ebt_entries __user *hook_entry[NF_BR_NUMHOOKS]; cheers, Bart -- Bart De Schuymer www.artinalgorithms.be