Florian Westphal 974292defe netfilter: nf_tables: only allow in/output for arp packets ... arp packets cannot be forwarded. They can be bridged, but then they can be filtered using either ebtables or nftables bridge family. The bridge netfilter exposes a "call-arptables" switch which pushes packets into arptables, but lets not expose this for nftables, so better close this asap. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2017-07-17 17:02:44 +02:00
..
Kconfig	…
Makefile	…
arp_tables.c	…
arpt_mangle.c	…
arptable_filter.c	…
ip_tables.c	…
ipt_CLUSTERIP.c	netfilter: ipt_CLUSTERIP: do not hold dev	2017-06-19 19:06:20 +02:00
ipt_ECN.c	…
ipt_MASQUERADE.c	…
ipt_REJECT.c	…
ipt_SYNPROXY.c	…
ipt_ah.c	…
ipt_rpfilter.c	…
iptable_filter.c	…
iptable_mangle.c	…
iptable_nat.c	…
iptable_raw.c	…
iptable_security.c	…
nf_conntrack_l3proto_ipv4.c	…
nf_conntrack_proto_icmp.c	…
nf_defrag_ipv4.c	…
nf_dup_ipv4.c	…
nf_log_arp.c	…
nf_log_ipv4.c	…
nf_nat_h323.c	…
nf_nat_l3proto_ipv4.c	…
nf_nat_masquerade_ipv4.c	…
nf_nat_pptp.c	…
nf_nat_proto_gre.c	…
nf_nat_proto_icmp.c	…
nf_nat_snmp_basic.c	…
nf_reject_ipv4.c	…
nf_socket_ipv4.c	…
nf_tables_arp.c	netfilter: nf_tables: only allow in/output for arp packets	2017-07-17 17:02:44 +02:00
nf_tables_ipv4.c	…
nft_chain_nat_ipv4.c	…
nft_chain_route_ipv4.c	…
nft_dup_ipv4.c	…
nft_fib_ipv4.c	…
nft_masq_ipv4.c	…
nft_redir_ipv4.c	…
nft_reject_ipv4.c	…