diff options
| author | Pablo Neira Ayuso | 2012-05-08 19:36:44 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso | 2012-05-08 19:36:47 +0200 |
| commit | 4981682cc19733f3ca43d3abd81dd4adbc9005d5 (patch) | |
| tree | 6c4583e26b8f12559defc11d0c141011a71e3de1 /Documentation/SubmitChecklist | |
| parent | netfilter: nf_conntrack: use this_cpu_inc() (diff) | |
| download | kernel-qcow2-linux-4981682cc19733f3ca43d3abd81dd4adbc9005d5.tar.gz kernel-qcow2-linux-4981682cc19733f3ca43d3abd81dd4adbc9005d5.tar.xz kernel-qcow2-linux-4981682cc19733f3ca43d3abd81dd4adbc9005d5.zip | |
netfilter: bridge: optionally set indev to vlan
if net.bridge.bridge-nf-filter-vlan-tagged sysctl is enabled, bridge
netfilter removes the vlan header temporarily and then feeds the packet
to ip(6)tables.
When the new "bridge-nf-pass-vlan-input-device" sysctl is on
(default off), then bridge netfilter will also set the
in-interface to the vlan interface; if such an interface exists.
This is needed to make iptables REDIRECT target work with
"vlan-on-top-of-bridge" setups and to allow use of "iptables -i" to
match the vlan device name.
Also update Documentation with current brnf default settings.
Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: Bart De Schuymer <bdschuym@pandora.be>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'Documentation/SubmitChecklist')
0 files changed, 0 insertions, 0 deletions