netfilter: explicit module dependency between br_netfilter and physdev

You can use physdev to match the physical interface enslaved to the
bridge device. This information is stored in skb->nf_bridge and it is
set up by br_netfilter. So, this is only available when iptables is
used from the bridge netfilter path.

Since 34666d4 ("netfilter: bridge: move br_netfilter out of the core"),
the br_netfilter code is modular. To reduce the impact of this change,
we can autoload the br_netfilter if the physdev match is used since
we assume that the users need br_netfilter in place.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

This commit is contained in:

Pablo Neira Ayuso

2014-10-02 18:30:57 +02:00

parent 36d2af5998

commit 4b7fd5d97e

3 changed files with 14 additions and 0 deletions

									
										include/net/netfilter/br_netfilter.h
									
		+6
		
												View File
												
				@@ -0,0 +1,6 @@

				#ifndef _BR_NETFILTER_H_

				#define _BR_NETFILTER_H_

				void br_netfilter_enable(void);

				#endif /* _BR_NETFILTER_H_ */