]> Gentwo Git Trees - linux/.git/commit
netfilter: nft_meta_bridge: introduce NFT_META_BRI_IIFHWADDR support
authorFernando Fernandez Mancera <fmancera@suse.de>
Tue, 2 Sep 2025 11:28:08 +0000 (13:28 +0200)
committerFlorian Westphal <fw@strlen.de>
Thu, 11 Sep 2025 13:40:55 +0000 (15:40 +0200)
commitcbd2257dc96e3e46217540fcb095a757ffa20d96
tree3b02eac53dae493ffd47193973cefadc1dfd118f
parentba941796d7cd1e81f51eed145dad1b47240ff420
netfilter: nft_meta_bridge: introduce NFT_META_BRI_IIFHWADDR support

Expose the input bridge interface ethernet address so it can be used to
redirect the packet to the receiving physical device for processing.

Tested with nft command line tool.

table bridge nat {
chain PREROUTING {
type filter hook prerouting priority 0; policy accept;
ether daddr de:ad:00:00:be:ef meta pkttype set host ether daddr set meta ibrhwdr accept
}
}

Joint work with Pablo Neira.

Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de>
Signed-off-by: Florian Westphal <fw@strlen.de>
include/uapi/linux/netfilter/nf_tables.h
net/bridge/netfilter/nft_meta_bridge.c