update the dhcp request with option82 about ebtables-dhcpsnooping HOT 7 CLOSED

With ebtables nflog, ebtables-dhcpsnoopingd is only receiving a copy of the dhcp request and has no opportunity to control or alter the dhcp request.
So in order to implement this, ebtables would need to drop the packet and depend on dhcpsnoopingd to send out the altered packet instead. Which would be quite possible to implement.

So patches would be welcomed.

from ebtables-dhcpsnooping.

I think that need to be used the nfqueue to receive, alter the packet and say to be accepted. I will look to do that and back soon.

from ebtables-dhcpsnooping.

I just looked into nfqueue and that seems to be a really good option to use.

from ebtables-dhcpsnooping.

My point is: ebtables don't have support for nfqueue.... will be necessary
to use the nfqueue over iptables and enable the kernel option net.bridge.
bridge-nf-call-iptables.... Could be a feature to implement in the future
when the nfqueue will be added.

Jorge Pereira

On Sat, Aug 8, 2015 at 4:10 AM, michael-dev [email protected]
wrote:

I just looked into nfqueue and that seems to be a really good option to
use.

—
Reply to this email directly or view it on GitHub
#3 (comment)
.

from ebtables-dhcpsnooping.

For documentation: http://www.spinics.net/lists/netfilter/msg53500.html

from ebtables-dhcpsnooping.

Looks like some nfqueue work for bridge nftables has been done in the meantime: http://lists.openwall.net/netdev/2016/04/12/102

from ebtables-dhcpsnooping.

nfqueue support has not been implemented in this repo yet

from ebtables-dhcpsnooping.