]> err.no Git - linux-2.6/commit
[NETFILTER]: ebt_arp: add gratuitous arp filtering
authorBart De Schuymer <bdschuym@pandora.be>
Fri, 13 Apr 2007 05:15:06 +0000 (22:15 -0700)
committerDavid S. Miller <davem@sunset.davemloft.net>
Thu, 26 Apr 2007 05:28:58 +0000 (22:28 -0700)
commitc15bf6e699f4c366f2d1e19ac5d7add21c6b5a19
tree2bcd680115a8b07cd6d7493b134ae2d36fe637be
parent516299d2f5b6f9703b9b388faf91898dc636a678
[NETFILTER]: ebt_arp: add gratuitous arp filtering

The attached patch adds gratuitous arp filtering, more precisely: it
allows checking that the IPv4 source address matches the IPv4
destination address inside the ARP header. It also adds a check for the
hardware address type when matching MAC addresses (nothing critical,
just for better consistency).

Signed-off-by: Bart De Schuymer <bdschuym@pandora.be>
Acked-by: Carl-Daniel Hailfinger <c-d.hailfinger.devel.2006@gmx.net>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
include/linux/netfilter_bridge/ebt_arp.h
net/bridge/netfilter/ebt_arp.c