[PATCH v2 nf] netfilter: ebtables: reject non-bridge targets

2018-06-06 Thread Florian Westphal
the ebtables evaluation loop expects targets to return positive values (jumps), or negative values (absolute verdicts). This is completely different from what xtables does. In xtables, targets are expected to return the standard netfilter verdicts, i.e. NF_DROP, NF_ACCEPT, etc. ebtables will cons

Re: [PATCH v2 nf] netfilter: ebtables: reject non-bridge targets

2018-06-06 Thread Pablo Neira Ayuso
On Wed, Jun 06, 2018 at 12:14:56PM +0200, Florian Westphal wrote: > the ebtables evaluation loop expects targets to return > positive values (jumps), or negative values (absolute verdicts). > > This is completely different from what xtables does. > In xtables, targets are expected to return the st