<html>
    <head>
      <base href="https://bugzilla.netfilter.org/" />
    </head>
    <body><table border="1" cellspacing="0" cellpadding="8">
        <tr>
          <th>Bug ID</th>
          <td><a class="bz_bug_link 
          bz_status_NEW "
   title="NEW - bridge-nf-filter-pppoe-tagged mtu bug?"
   href="https://bugzilla.netfilter.org/show_bug.cgi?id=1266">1266</a>
          </td>
        </tr>

        <tr>
          <th>Summary</th>
          <td>bridge-nf-filter-pppoe-tagged mtu bug?
          </td>
        </tr>

        <tr>
          <th>Product</th>
          <td>netfilter/iptables
          </td>
        </tr>

        <tr>
          <th>Version</th>
          <td>linux-2.6.x
          </td>
        </tr>

        <tr>
          <th>Hardware</th>
          <td>All
          </td>
        </tr>

        <tr>
          <th>OS</th>
          <td>RedHat Linux
          </td>
        </tr>

        <tr>
          <th>Status</th>
          <td>NEW
          </td>
        </tr>

        <tr>
          <th>Severity</th>
          <td>enhancement
          </td>
        </tr>

        <tr>
          <th>Priority</th>
          <td>P5
          </td>
        </tr>

        <tr>
          <th>Component</th>
          <td>bridging
          </td>
        </tr>

        <tr>
          <th>Assignee</th>
          <td>netfilter-buglog@lists.netfilter.org
          </td>
        </tr>

        <tr>
          <th>Reporter</th>
          <td>realvoland@yandex.ru
          </td>
        </tr></table>
      <p>
        <div>
        <pre>down vote
favorite

CentOs 6.9

I already has cofigured brdge br0:

(user.pppoe)-------(server.brdge)-------(ISP)

So, now I want to filter out IP packets by IP adressess from PPPoE traffic that
passes over the bridge. 
Server hasn't local ppp interfaces,only bridge and one management interface.

But. Then I seting up system variables:

bridge-nf-call-iptables=1
bridge-nf-filter-pppoe-tagged=1

User got a problem - Some sites are unable to load and give an error.

If I set variables like that:

bridge-nf-call-iptables=1
bridge-nf-filter-pppoe-tagged=0

or unset both to 0, all of sites working fine.

Seems like MTU Black Hole issure. I tried to change MTU by MSS value in
iptables, switching iptabless off, but unfortunatly.

Is it netfilter bug? How to fix it?</pre>
        </div>
      </p>
      <hr>
      <span>You are receiving this mail because:</span>
      
      <ul>
          <li>You are watching all bug changes.</li>
      </ul>
    </body>
</html>