netfilter: nft_reject_bridge: enable reject with bridge vlan
authorMichael Braun <michael-dev@fami-braun.de>
Wed, 6 May 2020 09:46:25 +0000 (11:46 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 3 Jun 2020 06:21:34 +0000 (08:21 +0200)
commit25f629a70680a2dc32fafc6bd38bbb2eb048e2bd
tree20dc612f98f4e1d0098def4be2e623e8de3e6367
parent26e28c10e72c1ecab8b3782dcdfdcc4c40dac84f
netfilter: nft_reject_bridge: enable reject with bridge vlan

commit e9c284ec4b41c827f4369973d2792992849e4fa5 upstream.

Currently, using the bridge reject target with tagged packets
results in untagged packets being sent back.

Fix this by mirroring the vlan id as well.

Fixes: 85f5b3086a04 ("netfilter: bridge: add reject support")
Signed-off-by: Michael Braun <michael-dev@fami-braun.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/bridge/netfilter/nft_reject_bridge.c