[Bridge] mac table updates
dmorris at metaloft.com
Thu Jul 28 16:23:43 PDT 2005
I think the new mac ageing (sometime since 18.104.22.168) may be too aggressive.
Now it updates the table at a much later time, with a comment in the =
code that leads me to believe
this is to prevent counting spoofed packets and a DOS.
My problem is that the update occurs after the netfilter hooks which may =
do weird things to change the course of the packet so that it does not =
(in my case, redirecting, queueing to userspace, nonlocally bound =
For me this causes packets to go spewing out on the wrong interface when =
the timer expires.
I used the attached patch to revert back to the old method.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 545 bytes
Desc: not available
Url : http://lists.linux-foundation.org/pipermail/bridge/attachments/200507=
More information about the Bridge