Subject: Re: [PATCH] bridge: add per bridge device controls for invoking iptables

From: Stephen Hemminger <[email-masked]>
Date: Wed, 30 Jun 2010 14:24:40 -0700

On Mon, 28 Jun 2010 14:47:00 +0200
[email-masked] wrote:

> From: Patrick McHardy <[email-masked]>
> 
> Support more fine grained control of bridge netfilter iptables invocation
> by adding seperate brnf_call_*tables parameters for each device using the
> sysfs interface. Packets are passed to layer 3 netfilter when either the
> global parameter or the per bridge parameter is enabled.
> 
> Signed-off-by: Patrick McHardy <[email-masked]>

Looks like a good idea.

Acked-by: Stephen Hemminger <[email-masked]>

--