Re: 2.6.12: connection tracking broken?
Herbert Xu <[email protected]>
| Newsgroups | gmane.comp.security.firewalls.netfilter.devel,gmane.linux.kernel,gmane.linux.network.bridge.ebtables.devel |
|---|---|
| Message-ID | <[email protected]> |
On Sun, Jun 19, 2005 at 05:18:13PM -0700, David S. Miller wrote: > From: Herbert Xu <[email protected]> > Date: Mon, 20 Jun 2005 10:05:42 +1000 > > > Why does it defer them at all? Shouldn't the fact that the device is > > bridged be transparent to the IP layer? > > The bridge netfilter layer uses netif_rx(skb) at the deepest level in > order to avoid too deep stack usage. Sorry, but I don't see the connection between this and deferring NF_IP_* hooks on the transmit path. Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <[email protected]> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt