| commit | 974292defee033bc43ccfcb2fcefc3eba3905340 | [log] [tgz] |
|---|---|---|
| author | Florian Westphal <fw@strlen.de> | Fri Jul 07 13:29:03 2017 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Mon Jul 17 17:02:44 2017 +0200 |
| tree | f9865fb83ea6979a8f7ef02d10020af01090e3bb | |
| parent | 97772bcd56efa21d9d8976db6f205574ea602f51 [diff] |
netfilter: nf_tables: only allow in/output for arp packets arp packets cannot be forwarded. They can be bridged, but then they can be filtered using either ebtables or nftables bridge family. The bridge netfilter exposes a "call-arptables" switch which pushes packets into arptables, but lets not expose this for nftables, so better close this asap. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>