search for: bdschuym

https://bugzilla.netfilter.org/bugzilla/show_bug.cgi?id=570 kaber@trash.net changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |INVALID ------- Additional Comments From kaber@trash.net 2007-05-26

...usty Russell) > 8. Re: [PATCH/RFC] Reduce call chain length in netfilter > (Rusty Russell) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 27 Jan 2005 22:16:04 +0100 > From: Bart De Schuymer <bdschuym@pandora.be> > Subject: [Bridge] Re: [PATCH/RFC] Reduce call chain length in > netfilter > To: "David S. Miller" <davem@davemloft.net> > Cc: netdev@oss.sgi.com, netfilter-devel@lists.netfilter.org, > bridge@osdl.org, snort2004@mail.ru, gandalf@wlug.westbo.se,...

...ueue_xmit(skb); return 0; --- linux-2.6.0-test6/net/bridge/br_netfilter.c Sun Sep 28 02:51:07 2003 +++ linux-2.6.0-test6-new/net/bridge/br_netfilter.c Mon Oct 6 21:10:40 2003 @@ -4,7 +4,13 @@ * * Authors: * Lennert Buytenhek <buytenh@gnu.org> - * Bart De Schuymer <bdschuym@pandora.be> + * Bart De Schuymer (maintainer) <bdschuym@pandora.be> + * + * Changes: + * Apr 29 2003: physdev module support (bdschuym) + * Jun 19 2003: let arptables see bridged ARP traffic (bdschuym) + * Oct 06 2003: filter encapsulated IP/ARP VLAN traffic on untagged bridge + *...

> From: "Roy" <roy@xxx.lt> > > I want to set interface to promisc mode and do all routing with iptables. > Is it somehow possible? as I see now kernel do not pass everything to > ipables. > > Basicaly I want to ignore ethernet addess and use only ip for routing. > > I suppose this may require writting special kernel driver or it > is possible > in

Hello, Due to a recent change in the bridge code, we now need a way of knowing if a packet has been defragmented. The bridge code now checks on the packet size and drops packets that are too big for the output port. Defragmented packets will get refragmented later, so they shouldn't be dropped. I've been reading the defragmentation code and can't find an easy way of knowing if a

Hi, please Cc: all replies, I'm not subscribed I seem to have troubles with my Linux bridge (2.6.8-rc2), which is apparently not bridging UDP fragments (NFS) when passing packets through iptables, but I do not see in the iptables stats where the packets are dropped. Policies for INPUT, FORWARD, OUTPUT are all "ACCEPT", and I grepped for all REJECT and DROP rules in iptables -nvL,

Hi Dave, Please apply this compiler warning fix from Randy. Signed-off-by: Bart De Schuymer <bdschuym@telenet.be> Signed-off-by: Randy Dunlap <rddunlap@osdl.org> diff -Naurp ./net/bridge/netfilter/ebt_ulog.c~brnetf_types ./net/bridge/netfilter/ebt_ulog.c --- ./net/bridge/netfilter/ebt_ulog.c~brnetf_types 2005-01-10 10:38:40.531343592 -0800 +++ ./net/bridge/netfilter/ebt_ulog.c 2005-01-10...

Hiyas, Is there a patch for the 2.4.x series to do ip6tables bridging of IPv6 packets? I was unable to go to 2.6 due to issues with large packets so still living in 2.4 land. If there are no patches, any ideas on what gets patched in IPv4 to allow this bridging? -Scott __________________________________ Do you Yahoo!? New and Improved Yahoo! Mail - Send 10MB messages!

Hi, At http://sourceforge.net/projects/ebtables/ you can find the following new releases: ebtables-brnf-3-vs-2.4.22 Changes: - let iptables see VLAN tagged IP traffic - bugfix for queued packets that get mangled in userspace - ebt_among module (Grzegorz Borowiak) - ebt_limit module (Tom Marshall) The patch compiles but I've done no further tests, but I probably didn't screw up.

Hi Dave, The patch below lets the bridge compile when CONFIG_BRIDGE_NETFILTER isn't enabled. This patch is an update of M.J. Miroslaw's patch that arrived through private mail. cheers, Bart --- linux-2.6.0-test10/net/bridge/br.c.old Wed Nov 26 01:28:16 2003 +++ linux-2.6.0-test10/net/bridge/br.c Wed Nov 26 01:31:54 2003 @@ -32,7 +32,7 @@ int (*br_should_route_hook) (struct sk_b

Hello, I how an embedded processor that needs to act as a bridge between a wireless and wired network. I have managed to bring up the bridge fine. I can also bring up the bridge with a static ip address. However I can not figure out how to bring up the bridge with a dynamic ip address. Is it possible to for a bridge to get a dynamically assigned ip address? Oliver

I would like to set up an ACL for an ethernet port using ebtables rules, and if a security violation occurs, to physically disable the port (i.e. whatever "ifconfig down" does). I did not see such a feature in the ebtables man page. Does this exist anywhere, or do I have to create a new extension for it? -- Dan Eble <dane@aiinet.com> _____ . | _

I am planning to schedule a monthly XCP meeting for the community and am struggling with when to host the call. As we are a global community, there is no single optimal time to host the meeting. In an effort to support the most likely attendees, please send me your time zone if you plan to participate in these calls. I will track the most common time zones in an effort to maximize attendance. All

I am planning to schedule a monthly XCP meeting for the community and am struggling with when to host the call. As we are a global community, there is no single optimal time to host the meeting. In an effort to support the most likely attendees, please send me your time zone if you plan to participate in these calls. I will track the most common time zones in an effort to maximize attendance. All

Hi, This is a second try to fix the long chain call lengths in netfilter. The difference with the previous patch is that I got rid of the extra argument. I somehow didn't see it could be done without using the 'int *ret2' argument. A comment on the number of arguments to nf_hook_slow: I don't think the number of arguments should be decreased. For the bridge-nf code, f.e., the

Santiago, I appreciate your offer. I'm not really a kernel hacker, however I do know C and I would be willing to try if you point me in the right direction. Here is my first attempt using Debian running on an UltraSPARC: debian{root}:/root<512>strace -f -F -v brctl addbr br0 execve("/usr/sbin/brctl", ["brctl", "addbr", "br0"], [/* 16 vars */]) =

On Fri, 07 Jan 2005 17:05:59 +0000 David Woodhouse <dwmw2@infradead.org> wrote: > On Sat, 2004-12-18 at 08:50 +0100, Andi Kleen wrote: > > It's not really an oops, just a warning that stack space got quiet > > tight. > > > > The problem seems to be that the br netfilter code is nesting far too > > deeply and recursing several times. Looks like a design

...adcom.com> Barry Grussling <barry@grussling.com> Barry Marson <bmarson@redhat.com> Barry Song <21cnbao@gmail.com> Barry Song <baohua.song@csr.com> Barry Song <baohua.song@csr.com> (for sirf) Barry Song <barry.song@analog.com> Bart De Schuymer <bdschuym@pandora.be> Bart Van Assche <bvanassche@acm.org> Bart Westgeest <bart@elbrys.com> Bartek Nowakowski <bartek.nowakowski@intel.com> Bartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com> bartosz.markowski <bartosz.markowski@tieto.com> Baruch Siach <baruch...

...adcom.com> Barry Grussling <barry@grussling.com> Barry Marson <bmarson@redhat.com> Barry Song <21cnbao@gmail.com> Barry Song <baohua.song@csr.com> Barry Song <baohua.song@csr.com> (for sirf) Barry Song <barry.song@analog.com> Bart De Schuymer <bdschuym@pandora.be> Bart Van Assche <bvanassche@acm.org> Bart Westgeest <bart@elbrys.com> Bartek Nowakowski <bartek.nowakowski@intel.com> Bartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com> bartosz.markowski <bartosz.markowski@tieto.com> Baruch Siach <baruch...

...adcom.com> Barry Grussling <barry@grussling.com> Barry Marson <bmarson@redhat.com> Barry Song <21cnbao@gmail.com> Barry Song <baohua.song@csr.com> Barry Song <baohua.song@csr.com> (for sirf) Barry Song <barry.song@analog.com> Bart De Schuymer <bdschuym@pandora.be> Bart Van Assche <bvanassche@acm.org> Bart Westgeest <bart@elbrys.com> Bartek Nowakowski <bartek.nowakowski@intel.com> Bartlomiej Zolnierkiewicz <b.zolnierkie@samsung.com> bartosz.markowski <bartosz.markowski@tieto.com> Baruch Siach <baruch...