trietptm / pentoo

Automatically exported from code.google.com/p/pentoo
1 stars 0 forks source link

add transparent nac bypass #191

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
https://lists.linux-foundation.org/pipermail/bridge/2010-October/007378.html
https://code.google.com/p/8021xbridge/
http://www.securitytube.net/video/2957
http://support.microsoft.com/kb/929851

Original issue reported on code.google.com by sidhayn on 30 Oct 2013 at 5:53

GoogleCodeExporter commented 9 years ago

Original comment by blshkv on 7 Nov 2013 at 9:13

Attachments:

GoogleCodeExporter commented 9 years ago
What does that patch break?  And does NAC bypass really not work if you do 
"brctrl stp <bridge> off" ? 

Original comment by three...@gmail.com on 11 Nov 2013 at 10:19

GoogleCodeExporter commented 9 years ago
no patch needed:

echo 8 > /sys/class/net/brXXX/bridge/group_fwd_mask

Original comment by sidhayn on 5 Dec 2014 at 12:30

GoogleCodeExporter commented 9 years ago
reference:

http://www.gremwell.com/linux_kernel_can_forward_802_1x

Original comment by sidhayn on 5 Dec 2014 at 2:06

GoogleCodeExporter commented 9 years ago
nice finding. I've look at the 515853ccecc6987dfb8ed809dd8bf8900286f29e 
commitment, it looks good. My patch is absolute now.

Original comment by blshkv on 9 Dec 2014 at 7:14