-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 13.08.2009 14:57, Jo-Philipp Wich wrote: > Hi. > >> Maybe it's indeed best to enable it in the kernel konfig, and disable >> by sysctl, as Matthias suggests. > > Enabling the bridge filtering in the kernel could have severe > performance impact since all packets will be routed through the bridge > layer then regardless of whether ebtables is installed/in use or not. > > I think it's best to keep it disabled, as in the release builds. > > Regards, > JoW
Then I would suggest to exclude ebtables/kmod-ebtables, when the global build setting "Select all packages by default" is selected. If this is not possible, then add an option to kmod-iptables to set CONFIG_BRIDGE_NETFILTER=y, otherwise use CONFIG_BRIDGE_NETFILTER=n. Just my two cents Maddes P.S.: Where can I find the definition (.config, documentation, etc.) what has to be enabled in a release build? -----BEGIN PGP SIGNATURE----- Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAkqEKQYACgkQUXXT+9wZdbWWXQCbB4siMrVDqc8Y3ZMw1q9McIyo 378An3WrdTSXI1P0deUhhp/TVPRtgYpn =4aZz -----END PGP SIGNATURE----- _______________________________________________ openwrt-devel mailing list openwrt-devel@lists.openwrt.org https://lists.openwrt.org/mailman/listinfo/openwrt-devel
