diff options
| author | Artur Molchanov <arturmolchanov@gmail.com> | 2016-12-30 11:46:36 -0500 |
|---|---|---|
| committer | Greg Kroah-Hartman <gregkh@linuxfoundation.org> | 2017-01-19 14:18:01 -0500 |
| commit | 259495a0440f6b8025277171d7becb8b92cece82 (patch) | |
| tree | f5308e31ddcc0e4873275ccf96d79bb1ee2d103c /net/bridge | |
| parent | 6ba35da690f30af09706095b914d8031902fd3e5 (diff) | |
bridge: netfilter: Fix dropping packets that moving through bridge interface
commit 14221cc45caad2fcab3a8543234bb7eda9b540d5 upstream.
Problem:
br_nf_pre_routing_finish() calls itself instead of
br_nf_pre_routing_finish_bridge(). Due to this bug reverse path filter drops
packets that go through bridge interface.
User impact:
Local docker containers with bridge network can not communicate with each
other.
Fixes: c5136b15ea36 ("netfilter: bridge: add and use br_nf_hook_thresh")
Signed-off-by: Artur Molchanov <artur.molchanov@synesis.ru>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
Diffstat (limited to 'net/bridge')
| -rw-r--r-- | net/bridge/br_netfilter_hooks.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/bridge/br_netfilter_hooks.c b/net/bridge/br_netfilter_hooks.c index 2fe9345c1407..7fbdbae58e65 100644 --- a/net/bridge/br_netfilter_hooks.c +++ b/net/bridge/br_netfilter_hooks.c | |||
| @@ -399,7 +399,7 @@ bridged_dnat: | |||
| 399 | br_nf_hook_thresh(NF_BR_PRE_ROUTING, | 399 | br_nf_hook_thresh(NF_BR_PRE_ROUTING, |
| 400 | net, sk, skb, skb->dev, | 400 | net, sk, skb, skb->dev, |
| 401 | NULL, | 401 | NULL, |
| 402 | br_nf_pre_routing_finish); | 402 | br_nf_pre_routing_finish_bridge); |
| 403 | return 0; | 403 | return 0; |
| 404 | } | 404 | } |
| 405 | ether_addr_copy(eth_hdr(skb)->h_dest, dev->dev_addr); | 405 | ether_addr_copy(eth_hdr(skb)->h_dest, dev->dev_addr); |
