]> git.ipfire.org Git - thirdparty/iptables.git/commit
extensions: libebt_redirect: prevent translation
authorMiao Wang <shankerwangmiao@gmail.com>
Thu, 17 Jul 2025 08:27:37 +0000 (16:27 +0800)
committerPhil Sutter <phil@nwl.cc>
Thu, 17 Jul 2025 10:01:41 +0000 (12:01 +0200)
commitd33c6ad308cf7b9f627aeed48a5163c0374b5035
tree8deda216ba20e891f70f39d5cc3e44aa1161b384
parent12e6b5ed65fd91ea413a2e45201289c3d01c4e29
extensions: libebt_redirect: prevent translation

The redirect target in ebtables do two things: 1. set skb->pkt_type to
PACKET_HOST, and 2. set the destination mac address to the address of
the receiving bridge device (when not used in BROUTING chain), or the
receiving physical device (otherwise). However, the later cannot be
implemented in nftables not given the translated mac address. So it is
not appropriate to give a specious translation.

This patch disables the translation to prevent possible misunderstanding.

Fixes: 24ce7465056ae ("ebtables-compat: add redirect match extension")
Signed-off-by: Miao Wang <shankerwangmiao@gmail.com>
Signed-off-by: Phil Sutter <phil@nwl.cc>
extensions/libebt_redirect.c
extensions/libebt_redirect.txlate [deleted file]