Re: [Bridge] [RFC] bridge: add netfilter hook for forwarding 802.1D group addresses

2011-08-22 Thread David Lamparter
On Fri, Aug 19, 2011 at 01:58:10PM -0700, Stephen Hemminger wrote: The IEEE standard expects that link local multicast packets will not be forwarded by a bridge. But there are cases like 802.1X which may require that packets be forwarded. For maximum flexibilty implement this via netfilter.

Re: [Bridge] [RFC] bridge: add netfilter hook for forwarding 802.1D group addresses

2011-08-20 Thread Christian Benvenuti (benve)
...@vger.kernel.org [mailto:netfilter-devel- ow...@vger.kernel.org] On Behalf Of Stephen Hemminger Sent: Friday, August 19, 2011 1:58 PM To: David Lamparter Cc: Nick Carter; Ed Swierk; net...@vger.kernel.org; bridge@linux- foundation.org; netfilter-de...@vger.kernel.org Subject: [RFC] bridge: add netfilter hook

[Bridge] [RFC] bridge: add netfilter hook for forwarding 802.1D group addresses

2011-08-19 Thread Stephen Hemminger
The IEEE standard expects that link local multicast packets will not be forwarded by a bridge. But there are cases like 802.1X which may require that packets be forwarded. For maximum flexibilty implement this via netfilter. The netfilter chain is slightly different from other chains in that if

Re: [Bridge] [RFC] bridge: add netfilter hook for forwarding 802.1D group addresses

2011-08-19 Thread Stephen Hemminger
On Fri, 19 Aug 2011 17:18:04 -0500 Christian Benvenuti (benve) be...@cisco.com wrote: The patch description and the code are clearly saying that STP is an exception, but I am just worried about the users. Maybe a proper description in the iptables help is sufficient. Users may otherwise try