Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 5d927eb0 authored by Harald Welte's avatar Harald Welte Committed by David S. Miller
Browse files

[NETFILTER]: Fix handling of ICMP packets (RELATED) in ipt_CLUSTERIP target. 



Signed-off-by: default avatarHarald Welte <laforge@netfilter.org>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent 4e93d3e8

net/ipv4/netfilter/ipt_CLUSTERIP.c

+1 −1
Original line number Diff line number Diff line
@@ -339,7 +339,7 @@ target(struct sk_buff **pskb, 
	 * error messages (RELATED) and information requests (see below) */

	if ((*pskb)->nh.iph->protocol == IPPROTO_ICMP

	    && (ctinfo == IP_CT_RELATED 

		|| ctinfo == IP_CT_IS_REPLY+IP_CT_IS_REPLY))

		|| ctinfo == IP_CT_RELATED+IP_CT_IS_REPLY))

		return IPT_CONTINUE;



	/* ip_conntrack_icmp guarantees us that we only have ICMP_ECHO,