Packets that were destined for an IP on the bridge interface were not being filtered on the member interface itself, just on the bridge interface. That was due to the pfil hooks not being executed on the member interface itself, before being pushed to the bridge. The attached patch (also available at http://www.rumko.net/dragonfly/0001-bridge-pfil-hooks-on-packets-destined-for-the-bridge.patch) fixes this unhandled situation. -- Please do not CC me, since I already receive everything from these MLs.
Regards, Rumko
0001-bridge-pfil-hooks-on-packets-destined-for-the-bridge.patch
Description: application/mbox
