diff options
| author | Georg Kohmann <geokohma@cisco.com> | 2020-10-13 14:23:12 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2020-10-20 13:54:53 +0200 |
| commit | 68f9f9c2c3b6a7259f6a92bc26cdc7bd22e7a982 (patch) | |
| tree | 3a2457acc9eb577d7ffa6c11ab3cc1a173441acb /net/bridge/netfilter/ebt_dnat.c | |
| parent | 4f25434bccc28cf8a07876ef5142a2869a674353 (diff) | |
netfilter: Drop fragmented ndisc packets assembled in netfilter
Fragmented ndisc packets assembled in netfilter not dropped as specified
in RFC 6980, section 5. This behaviour breaks TAHI IPv6 Core Conformance
Tests v6LC.2.1.22/23, V6LC.2.2.26/27 and V6LC.2.3.18.
Setting IP6SKB_FRAGMENTED flag during reassembly.
References: commit b800c3b966bc ("ipv6: drop fragmented ndisc packets by default (RFC 6980)")
Signed-off-by: Georg Kohmann <geokohma@cisco.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/bridge/netfilter/ebt_dnat.c')
0 files changed, 0 insertions, 0 deletions