Michael Braun d05b5898f7 netfilter: nft_reject_bridge: enable reject with bridge vlan ...

commit e9c284ec4b upstream.

Currently, using the bridge reject target with tagged packets
results in untagged packets being sent back.

Fix this by mirroring the vlan id as well.

Fixes: 85f5b3086a ("netfilter: bridge: add reject support")
Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2023-05-15 17:30:35 +09:00

..

ebt_802_3.c

netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF

2016-07-03 10:55:07 +02:00

ebt_among.c

netfilter: bridge: ebt_among: add more missing match size checks

2018-04-08 12:12:49 +02:00

ebt_arp.c

netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF

2016-07-03 10:55:07 +02:00

ebt_arpreply.c

ebtables: arpreply: Add the standard target sanity check

2023-05-15 08:58:14 +09:00

ebt_dnat.c

bridge: netfilter: Use ether_addr_copy

2014-02-24 19:16:44 -05:00

ebt_ip6.c

netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF

2016-07-03 10:55:07 +02:00

ebt_ip.c

netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF

2016-07-03 10:55:07 +02:00

ebt_limit.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ebt_log.c

netfilter: nft_log: complete NFTA_LOG_FLAGS attr support

2016-09-25 23:16:43 +02:00

ebt_mark_m.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ebt_mark.c

netfilter: xtables: substitute temporary defines by final name

2010-05-11 18:31:17 +02:00

ebt_nflog.c

netfilter: x_tables: Use par->net instead of computing from the passed net devices

2015-09-18 21:58:25 +02:00

ebt_pkttype.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ebt_redirect.c

netfilter: Remove explicit rcu_read_lock in nf_hook_slow

2016-09-24 21:29:53 +02:00

ebt_snat.c

bridge: netfilter: Use ether_addr_copy

2014-02-24 19:16:44 -05:00

ebt_stp.c

netfilter: Convert FWINV<[foo]> macros and uses to NF_INVF

2016-07-03 10:55:07 +02:00

ebt_vlan.c

netfilter-bridge: use netdev style comments

2015-11-23 17:54:39 +01:00

ebtable_broute.c

netfilter: ebtables: Simplify the arguments to ebt_do_table

2015-09-18 21:57:35 +02:00

ebtable_filter.c

netfilter-bridge: Cleanse indentation

2015-11-23 17:54:39 +01:00

ebtable_nat.c

netfilter-bridge: Cleanse indentation

2015-11-23 17:54:39 +01:00

ebtables.c

netfilter: ebtables: CONFIG_COMPAT: reject trailing data after last rule

2023-05-15 16:45:18 +09:00

Kconfig

netfilter: bridge: add reject support

2014-07-22 12:00:22 +02:00

Makefile

netfilter: kill remnants of ulog targets

2014-07-25 14:55:44 +02:00

nf_log_bridge.c

netfilter: log: Check param to avoid overflow in nf_log_set

2016-08-30 11:52:32 +02:00

nf_tables_bridge.c

netfilter: Add the missed return value check of nft_register_chain_type

2016-09-12 19:54:45 +02:00

nft_meta_bridge.c

netfilter: nft_meta: improve the validity check of pkttype set expr

2016-08-25 13:12:03 +02:00

nft_reject_bridge.c

netfilter: nft_reject_bridge: enable reject with bridge vlan

2023-05-15 17:30:35 +09:00