maxmustermann/linux
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
linux/net/ipv6/netfilter
History
Masahide NAKAMURA 138939e066 [NETFILTER]: ip6t_mh: drop piggyback payload packet on MH packets 
Regarding RFC3775, MH payload proto field should be IPPROTO_NONE. Otherwise
it must be discarded (and the receiver should send ICMP error).

We assume filter should drop such piggyback everytime to disallow slipping
through firewall rules, even the final receiver will discard it.

Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-02-12 11:16:17 -08:00
..
ip6_queue.c [NET] IPV6: Fix whitespace errors. 2007-02-10 23:19:42 -08:00
ip6_tables.c [NET] IPV6: Fix whitespace errors. 2007-02-10 23:19:42 -08:00
ip6t_ah.c [NET] IPV6: Fix whitespace errors. 2007-02-10 23:19:42 -08:00
ip6t_eui64.c [NETFILTER]: {ip,ip6}_tables: remove x_tables wrapper functions 2007-02-08 12:39:19 -08:00
ip6t_frag.c [NETFILTER]: {ip,ip6}_tables: remove x_tables wrapper functions 2007-02-08 12:39:19 -08:00
ip6t_hbh.c [NETFILTER]: {ip,ip6}_tables: remove x_tables wrapper functions 2007-02-08 12:39:19 -08:00
ip6t_HL.c [NET] IPV6: Fix whitespace errors. 2007-02-10 23:19:42 -08:00
ip6t_hl.c [NET] IPV6: Fix whitespace errors. 2007-02-10 23:19:42 -08:00
ip6t_ipv6header.c [NET] IPV6: Fix whitespace errors. 2007-02-10 23:19:42 -08:00
ip6t_LOG.c [NETFILTER]: nf_log: minor cleanups 2007-02-12 11:11:55 -08:00
ip6t_mh.c [NETFILTER]: ip6t_mh: drop piggyback payload packet on MH packets 2007-02-12 11:16:17 -08:00
ip6t_owner.c [NETFILTER]: {ip,ip6}_tables: remove x_tables wrapper functions 2007-02-08 12:39:19 -08:00
ip6t_REJECT.c [NET] IPV6: Fix whitespace errors. 2007-02-10 23:19:42 -08:00
ip6t_rt.c [NETFILTER]: {ip,ip6}_tables: remove x_tables wrapper functions 2007-02-08 12:39:19 -08:00
ip6table_filter.c [NETFILTER]: ip6_tables: remove redundant structure definitions 2007-02-08 12:39:23 -08:00
ip6table_mangle.c [NET] IPV6: Fix whitespace errors. 2007-02-10 23:19:42 -08:00
ip6table_raw.c [NET] IPV6: Fix whitespace errors. 2007-02-10 23:19:42 -08:00
Kconfig [NETFILTER]: Kconfig: improve dependency handling 2007-02-12 11:15:02 -08:00
Makefile [NETFILTER]: ip6_tables: support MH match 2007-02-08 12:39:21 -08:00
nf_conntrack_l3proto_ipv6.c [NETFILTER]: nf_conntrack: fix invalid conntrack statistics RCU assumption 2007-02-12 11:13:43 -08:00
nf_conntrack_proto_icmpv6.c [NETFILTER]: nf_conntrack: properly use RCU API for nf_ct_protos/nf_ct_l3protos arrays 2007-02-12 11:12:57 -08:00
nf_conntrack_reasm.c [NET] IPV6: Fix whitespace errors. 2007-02-10 23:19:42 -08:00