Phil Sutter 566bf0e1c7 netfilter: nft_reject_bridge: Fix for missing reply from prerouting ...

commit aeac4554eb upstream.

Prior to commit fa538f7cf0 ("netfilter: nf_reject: add reject skbuff
creation helpers"), nft_reject_bridge did not assign to nskb->dev before
passing nskb on to br_forward(). The shared skbuff creation helpers
introduced in above commit do which seems to confuse br_forward() as
reject statements in prerouting hook won't emit a packet anymore.

Fix this by simply passing NULL instead of 'dev' to the helpers - they
use the pointer for just that assignment, nothing else.

Fixes: fa538f7cf0 ("netfilter: nf_reject: add reject skbuff creation helpers")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2022-02-08 18:34:08 +01:00

..

ebt_802_3.c

netfilter: inline xt_hashlimit, ebt_802_3 and xt_physdev headers

2019-09-13 12:32:48 +02:00

ebt_among.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

ebt_arp.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

ebt_arpreply.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

ebt_dnat.c

netfilter: ebtables: Fixes dropping of small packets in bridge nat

2020-10-20 13:54:53 +02:00

ebt_ip6.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

ebt_ip.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

ebt_limit.c

netfilter: allow to turn off xtables compat layer

2021-04-26 18:16:56 +02:00

ebt_log.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

ebt_mark_m.c

netfilter: allow to turn off xtables compat layer

2021-04-26 18:16:56 +02:00

ebt_mark.c

netfilter: allow to turn off xtables compat layer

2021-04-26 18:16:56 +02:00

ebt_nflog.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

ebt_pkttype.c

treewide: Add SPDX license identifier for more missed files

2019-05-21 10:50:45 +02:00

ebt_redirect.c

netfilter: ebtables: Fixes dropping of small packets in bridge nat

2020-10-20 13:54:53 +02:00

ebt_snat.c

netfilter: ebtables: Fixes dropping of small packets in bridge nat

2020-10-20 13:54:53 +02:00

ebt_stp.c

netfilter: ebt_stp: Remove unused macro BPDU_TYPE_TCN

2020-09-08 12:56:38 +02:00

ebt_vlan.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 13

2019-05-21 11:28:45 +02:00

ebtable_broute.c

netfilter: ebtables: do not hook tables by default

2021-08-02 11:40:45 +02:00

ebtable_filter.c

netfilter: ebtables: do not hook tables by default

2021-08-02 11:40:45 +02:00

ebtable_nat.c

netfilter: ebtables: do not hook tables by default

2021-08-02 11:40:45 +02:00

ebtables.c

netfilter: ebtables: allocate chainstack on CPU local nodes

2021-10-18 00:23:57 +02:00

Kconfig

netfilter: nf_log_bridge: merge with nf_log_syslog

2021-03-31 22:34:05 +02:00

Makefile

netfilter: nf_log_bridge: merge with nf_log_syslog

2021-03-31 22:34:05 +02:00

nf_conntrack_bridge.c

netfilter: nf_conntrack_bridge: Fix memory leak when error

2021-08-04 10:41:29 +02:00

nft_meta_bridge.c

netfilter: nftables: add nft_parse_register_store() and use it

2021-01-27 23:16:02 +01:00

nft_reject_bridge.c

netfilter: nft_reject_bridge: Fix for missing reply from prerouting

2022-02-08 18:34:08 +01:00