Re: [PATCH] arp_filter patch for 2.4.4 kernel.

[dean gaudet]

On Sat, 5 May 2001, David S. Miller wrote:

> How difficult is it to compose netfilter rules that do this?

what's the performance impact of doing that?

i've got multiple ip networks on the same gigabit link...  i'm pretty
happy with this tiny patch i've posted before, which is not on any
critical path (it's in the ARP code after all).

-dean

--- linux/net/ipv4/arp.c.badproxy	Mon Feb 12 17:28:48 2001
+++ linux/net/ipv4/arp.c	Tue Feb 13 20:06:37 2001
@@ -737,10 +737,12 @@
 		addr_type = rt->rt_type;

 		if (addr_type == RTN_LOCAL) {
+			if ((rt->rt_flags&RTCF_DIRECTSRC) || IN_DEV_PROXY_ARP(in_dev)) {
 			n = neigh_event_ns(&arp_tbl, sha, &sip, dev);
 			if (n) {
 				arp_send(ARPOP_REPLY,ETH_P_ARP,sip,dev,tip,sha,dev->dev_addr,sha);
 				neigh_release(n);
+			}
 			}
 			goto out;
 		} else if (IN_DEV_FORWARD(in_dev)) {