Commit 4d87716c authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso

netfilter: nf_tables_bridge: update hook_mask to allow {pre,post}routing

Fixes: 36d2af59 ("netfilter: nf_tables: allow to filter from prerouting and postrouting")
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 3d53666b
...@@ -75,9 +75,11 @@ static const struct nf_chain_type filter_bridge = { ...@@ -75,9 +75,11 @@ static const struct nf_chain_type filter_bridge = {
.type = NFT_CHAIN_T_DEFAULT, .type = NFT_CHAIN_T_DEFAULT,
.family = NFPROTO_BRIDGE, .family = NFPROTO_BRIDGE,
.owner = THIS_MODULE, .owner = THIS_MODULE,
.hook_mask = (1 << NF_BR_LOCAL_IN) | .hook_mask = (1 << NF_BR_PRE_ROUTING) |
(1 << NF_BR_LOCAL_IN) |
(1 << NF_BR_FORWARD) | (1 << NF_BR_FORWARD) |
(1 << NF_BR_LOCAL_OUT), (1 << NF_BR_LOCAL_OUT) |
(1 << NF_BR_POST_ROUTING),
}; };
static int __init nf_tables_bridge_init(void) static int __init nf_tables_bridge_init(void)
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment