Florian Westphal f83a7ea207 netfilter: xt_rpfilter: skip locally generated broadcast/multicast, too ... Alex Efros reported rpfilter module doesn't match following packets: IN=br.qemu SRC=192.168.2.1 DST=192.168.2.255 [ .. ] (netfilter bugzilla #814). Problem is that network stack arranges for the locally generated broadcasts to appear on the interface they were sent out, so the IFF_LOOPBACK check doesn't trigger. As -m rpfilter is restricted to PREROUTING, we can check for existing rtable instead, it catches locally-generated broad/multicast case, too. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2013-04-19 00:11:59 +02:00
..
Kconfig	netfilter: combine ipt_REDIRECT and ip6t_REDIRECT	2012-09-21 12:12:05 +02:00
Makefile	netfilter: combine ipt_REDIRECT and ip6t_REDIRECT	2012-09-21 12:12:05 +02:00
ip6_tables.c	netfilter: Use IS_ERR_OR_NULL().	2013-01-22 14:28:29 -05:00
ip6t_MASQUERADE.c	netfilter: ip6tables: add MASQUERADE target	2012-08-30 03:00:18 +02:00
ip6t_NPT.c	netfilter: ip6t_NPT: Fix translation for non-multiple of 32 prefix lengths	2013-04-03 12:24:56 +02:00
ip6t_REJECT.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2013-01-15 15:05:59 -05:00
ip6t_ah.c	netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()	2012-05-09 12:53:47 +02:00
ip6t_eui64.c	netfilter: xtables: change hotdrop pointer to direct modification	2010-05-11 18:35:27 +02:00
ip6t_frag.c	netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()	2012-05-09 12:53:47 +02:00
ip6t_hbh.c	netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()	2012-05-09 12:53:47 +02:00
ip6t_ipv6header.c	netfilter: xtables: deconstify struct xt_action_param for matches	2010-05-11 18:33:37 +02:00
ip6t_mh.c	netfilter: xtables: change hotdrop pointer to direct modification	2010-05-11 18:35:27 +02:00
ip6t_rpfilter.c	netfilter: xt_rpfilter: skip locally generated broadcast/multicast, too	2013-04-19 00:11:59 +02:00
ip6t_rt.c	netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()	2012-05-09 12:53:47 +02:00
ip6table_filter.c	netfilter: PTR_RET can be used	2012-08-14 02:31:47 +02:00
ip6table_mangle.c	netfilter ip6table_mangle: Use ipv6_addr_equal() where appropriate.	2013-01-29 22:58:40 -05:00
ip6table_nat.c	netfilter: nf_nat: Also handle non-ESTABLISHED routing changes in MASQUERADE	2012-12-16 23:28:30 +01:00
ip6table_raw.c	netfilter: PTR_RET can be used	2012-08-14 02:31:47 +02:00
ip6table_security.c	netfilter: PTR_RET can be used	2012-08-14 02:31:47 +02:00
nf_conntrack_l3proto_ipv6.c	netfilter: nf_ct_helper: better logging for dropped packets	2013-02-19 02:48:05 +01:00
nf_conntrack_proto_icmpv6.c	ipv6: use IS_ENABLED()	2012-11-01 12:41:35 -04:00
nf_conntrack_reasm.c	inet: limit length of fragment queue hash table bucket lists	2013-03-19 10:28:36 -04:00
nf_defrag_ipv6_hooks.c	ipv6: use IS_ENABLED()	2012-11-01 12:41:35 -04:00
nf_nat_l3proto_ipv6.c	netfilter: ipv6: using csum_ipv6_magic requires net/ip6_checksum.h	2012-09-05 17:46:06 -04:00
nf_nat_proto_icmpv6.c	ipv6: use IS_ENABLED()	2012-11-01 12:41:35 -04:00