ebtables-devel

[Ebtables-devel] filter bridged IPv4/IPv6 encapsulated in pppoe traffic

[Bart De S. <bds...@pa...>]

Hi Patrick,

The attached patch by Michael Milner adds support for using iptables and
ip6tables on bridged traffic encapsulated in ppoe frames, similar to
what's already supported for vlan.

Please apply,
Bart


Signed-off-by: Bart De Schuymer <bds...@pa...>
Signed-off-by: Michal Milner <mi...@bl...>

Re: [Ebtables-devel] filter bridged IPv4/IPv6 encapsulated in pppoe traffic

[Patrick M. <ka...@tr...>]

Bart De Schuymer wrote:
> Hi Patrick,
> 
> The attached patch by Michael Milner adds support for using iptables and
> ip6tables on bridged traffic encapsulated in ppoe frames, similar to
> what's already supported for vlan.


Looks good, but doesn't apply to the net-2.6.22 tree since
it conflicts with Arnaldo's skb accessor changes. Please
rediff and resend.

> --- a/net/bridge/br_netfilter.c	2007-02-20 01:34:32.000000000 -0500
> +++ b/net/bridge/br_netfilter.c	2007-03-01 13:29:08.000000000 -0500
> @@ -12,6 +12,7 @@
>   *	Oct 06 2003: filter encapsulated IP/ARP VLAN traffic on untagged bridge
>   *	             (bdschuym)
>   *	Sep 01 2004: add IPv6 filtering (bdschuym)
> + *	Jan 16 2007: let iptables see bridged PPPoE IP traffic (mdmilner)


And please don't do this, we have git for changelogs, there is
no need to keep them in the source. In fact I have a patch
queued which removes them from all net/ipv[46]/netfilter and
net/netfilter files.

Re: [Ebtables-devel] filter bridged IPv4/IPv6 encapsulated in pppoe traffic

[Bart De S. <bds...@pa...>]

Op do, 22-03-2007 te 23:07 +0100, schreef Patrick McHardy:
> Bart De Schuymer wrote:
> > Hi Patrick,
> > 
> > The attached patch by Michael Milner adds support for using iptables and
> > ip6tables on bridged traffic encapsulated in ppoe frames, similar to
> > what's already supported for vlan.
> 
> 
> Looks good, but doesn't apply to the net-2.6.22 tree since
> it conflicts with Arnaldo's skb accessor changes. Please
> rediff and resend.

See attachment. The rediff is on my account. Fixed a compile error when
CONFIG_SYSCTL isn't defined and updated the Documentation. Use
vlan_eth_hdr and skb->network_header.

Signed-off-by: Michael Milner <mi...@bl...>
Signed-off-by: Bart De Schuymer <bds...@pa...>

cheers,
Bart

Re: [Ebtables-devel] filter bridged IPv4/IPv6 encapsulated in pppoe traffic

[Patrick M. <ka...@tr...>]

Bart De Schuymer wrote:
> See attachment. The rediff is on my account. Fixed a compile error when
> CONFIG_SYSCTL isn't defined and updated the Documentation. Use
> vlan_eth_hdr and skb->network_header.


Applied, thanks Bart.