Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 2fab8917 authored by Jesper Dangaard Brouer's avatar Jesper Dangaard Brouer Committed by Simon Horman
Browse files

ipvs: IPv6 extend ICMPv6 handling for future types 



Extend handling of ICMPv6, to all none Informational Messages
(via ICMPV6_INFOMSG_MASK).  This actually only extend our handling to
type ICMPV6_PARAMPROB (Parameter Problem), and future types.

Signed-off-by: default avatarJesper Dangaard Brouer <brouer@redhat.com>
Acked-by: default avatarJulian Anastasov <ja@ssi.bg>
Signed-off-by: default avatarSimon Horman <horms@verge.net.au>
parent 120b9c14

net/netfilter/ipvs/ip_vs_core.c

+2 −6
Original line number Diff line number Diff line
@@ -950,9 +950,7 @@ static int ip_vs_out_icmp_v6(struct sk_buff *skb, int *related, 
	 * this means that some packets will manage to get a long way

	 * down this stack and then be rejected, but that's life.

	 */

	if ((ic->icmp6_type != ICMPV6_DEST_UNREACH) &&

	    (ic->icmp6_type != ICMPV6_PKT_TOOBIG) &&

	    (ic->icmp6_type != ICMPV6_TIME_EXCEED)) {

	if (ic->icmp6_type & ICMPV6_INFOMSG_MASK) {

		*related = 0;

		return NF_ACCEPT;

	}
@@ -1498,9 +1496,7 @@ ip_vs_in_icmp_v6(struct sk_buff *skb, int *related, unsigned int hooknum) 
	 * this means that some packets will manage to get a long way

	 * down this stack and then be rejected, but that's life.

	 */

	if ((ic->icmp6_type != ICMPV6_DEST_UNREACH) &&

	    (ic->icmp6_type != ICMPV6_PKT_TOOBIG) &&

	    (ic->icmp6_type != ICMPV6_TIME_EXCEED)) {

	if (ic->icmp6_type & ICMPV6_INFOMSG_MASK) {

		*related = 0;

		return NF_ACCEPT;

	}