• Florian Westphal's avatar
    netfilter: bridge: add and use br_nf_hook_thresh · c5136b15
    Florian Westphal authored
    This replaces the last uses of NF_HOOK_THRESH().
    Followup patch will remove it and rename nf_hook_thresh.
    The reason is that inet (non-bridge) netfilter no longer invokes the
    hooks from hooks, so we do no longer need the thresh value to skip hooks
    with a lower priority.
    The bridge netfilter however may need to do this. br_nf_hook_thresh is a
    wrapper that is supposed to do this, i.e. only call hooks with a
    priority that exceeds NF_BR_PRI_BRNF.
    It's used only in the recursion cases of br_netfilter.  It invokes
    nf_hook_slow while holding an rcu read-side critical section to make a
    future cleanup simpler.
    Signed-off-by: default avatarFlorian Westphal <fw@strlen.de>
    Signed-off-by: Aaron Conole's avatarAaron Conole <aconole@bytheb.org>
    Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
br_netfilter_ipv6.c 5.76 KB