Re: Re: [Ebtables-user] bridge/ebtables interaction...

Op wo, 25-05-2005 te 14:43 -0700, schreef Stephen Hemminger:
> This is the patch I am testing now, does it do what you want?

Are you sure the STP fdb update is still completely covered?
Apart from that it's ok for me.

cheers,
Bart


> Index: bridge/net/bridge/br_input.c
> ===================================================================
> --- bridge.orig/net/bridge/br_input.c
> +++ bridge/net/bridge/br_input.c
> @@ -54,6 +54,9 @@ int br_handle_frame_finish(struct sk_buf
>  	struct net_bridge_fdb_entry *dst;
>  	int passedup = 0;
>  
> +	/* insert into forwarding database after filtering to avoid spoofing */
> +	br_fdb_update(p->br, p, eth_hdr(skb)->h_source);
> +
>  	if (br->dev->flags & IFF_PROMISC) {
>  		struct sk_buff *skb2;
>  
> @@ -108,8 +111,7 @@ int br_handle_frame(struct net_bridge_po
>  	if (!is_valid_ether_addr(eth_hdr(skb)->h_source))
>  		goto err;
>  
> -	if (p->state == BR_STATE_LEARNING ||
> -	    p->state == BR_STATE_FORWARDING)
> +	if (p->state == BR_STATE_LEARNING)
>  		br_fdb_update(p->br, p, eth_hdr(skb)->h_source);
>  
>  	if (p->br->stp_enabled &&
> 
> 
> -------------------------------------------------------
> SF.Net email is sponsored by: GoToMeeting - the easiest way to collaborate
> online with coworkers and clients while avoiding the high cost of travel and
> communications. There is no equipment to buy and you can meet as often as
> you want. Try it free.http://ads.osdn.com/?ad_id=7402&alloc_id=16135&op=click
> _______________________________________________
> Ebtables-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/ebtables-devel
> 



-------------------------------------------------------
SF.Net email is sponsored by: GoToMeeting - the easiest way to collaborate
online with coworkers and clients while avoiding the high cost of travel and
communications. There is no equipment to buy and you can meet as often as
you want. Try it free.http://ads.osdn.com/?ad_id=7402&alloc_id=16135&op=click