Jiri Pirko
6aafeef03b
netfilter: push reasm skb through instead of original frag skbs
...
Pushing original fragments through causes several problems. For example
for matching, frags may not be matched correctly. Take following
example:
<example>
On HOSTA do:
ip6tables -I INPUT -p icmpv6 -j DROP
ip6tables -I INPUT -p icmpv6 -m icmp6 --icmpv6-type 128 -j ACCEPT
and on HOSTB you do:
ping6 HOSTA -s2000 (MTU is 1500)
Incoming echo requests will be filtered out on HOSTA. This issue does
not occur with smaller packets than MTU (where fragmentation does not happen)
</example>
As was discussed previously, the only correct solution seems to be to use
reassembled skb instead of separete frags. Doing this has positive side
effects in reducing sk_buff by one pointer (nfct_reasm) and also the reams
dances in ipvs and conntrack can be removed.
Future plan is to remove net/ipv6/netfilter/nf_conntrack_reasm.c
entirely and use code in net/ipv6/reassembly.c instead.
Signed-off-by: Jiri Pirko <jiri@resnulli.us>
Acked-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Marcelo Ricardo Leitner <mleitner@redhat.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
2013-11-11 00:19:35 -05:00
..
2013-09-11 12:34:13 -07:00
2013-11-08 09:03:10 -05:00
2013-09-23 16:29:41 -04:00
2013-10-17 15:13:20 -04:00
2013-04-08 17:16:57 -04:00
2013-11-11 00:19:35 -05:00
2013-10-21 18:43:02 -04:00
2013-09-25 14:59:56 +02:00
2012-06-17 16:29:38 -07:00
2013-11-03 23:04:57 -05:00
2010-08-20 01:42:59 -07:00
2013-07-31 17:24:22 -07:00
2013-09-28 15:56:15 -04:00
2013-07-31 17:50:01 -07:00
2013-08-10 01:16:44 -07:00
2013-07-27 22:14:06 -07:00
2011-01-13 21:48:25 -08:00
2013-07-31 17:50:02 -07:00
2011-11-30 18:51:03 -05:00
2013-07-31 17:50:02 -07:00
2013-08-28 17:45:48 -04:00
2011-08-08 14:26:29 -04:00
2013-10-28 15:05:27 +01:00
2013-11-04 15:27:08 -05:00
2013-10-19 18:55:42 -04:00
2013-09-05 14:54:29 -07:00
2013-11-04 20:01:29 -05:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2012-04-05 05:08:04 -04:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2013-09-20 14:49:32 -04:00
2011-12-01 11:41:06 -05:00
2013-01-09 23:59:53 -08:00
2012-07-19 10:43:03 -07:00
2013-10-23 16:49:34 -04:00
2013-11-07 19:28:58 -05:00
2013-09-20 14:49:33 -04:00
2013-03-26 12:32:13 -04:00
2013-10-03 15:36:37 -04:00
2013-09-20 14:49:33 -04:00
2013-09-20 14:49:33 -04:00
2013-09-20 14:49:33 -04:00
2013-09-20 14:49:33 -04:00
2013-10-19 19:36:18 -04:00
2013-01-27 22:46:33 -05:00
2013-09-20 14:49:33 -04:00
2013-07-16 09:58:05 +03:00
2013-04-08 12:00:16 -04:00
2011-11-14 00:19:42 -05:00
2013-10-28 20:07:50 -04:00
2013-09-21 14:01:38 -04:00
2013-10-19 19:45:34 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-05-28 23:49:07 -07:00
2013-10-23 17:01:41 -04:00
2013-10-08 23:19:24 -04:00
2013-10-19 19:45:35 -04:00
2013-10-17 15:56:53 -04:00
2013-09-21 14:01:38 -04:00
2013-10-09 13:04:03 -04:00
2013-11-04 13:48:30 -05:00
2013-10-23 16:49:34 -04:00
2013-09-04 00:27:25 -04:00
2013-09-21 14:01:38 -04:00
2013-10-19 19:36:18 -04:00
2013-11-11 00:19:35 -05:00
2013-10-09 00:01:25 -04:00
2013-11-08 13:42:57 -05:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:39 -04:00
2013-09-21 14:01:38 -04:00
2013-04-29 15:41:56 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-09-21 14:01:38 -04:00
2013-10-28 15:05:27 +01:00
2013-10-21 18:56:23 -04:00
2010-06-03 03:21:52 -07:00
2013-09-04 14:53:20 -04:00
2013-10-01 17:06:14 -04:00
2013-09-21 14:01:39 -04:00
2013-07-31 17:50:02 -07:00
2013-10-14 18:00:59 +02:00
2011-05-27 13:41:33 -04:00
2013-09-21 14:01:39 -04:00
2012-09-17 18:08:54 -07:00
2013-09-21 14:01:39 -04:00
2013-09-05 14:54:29 -07:00
2013-09-21 14:01:39 -04:00
2013-09-21 14:01:39 -04:00
2013-09-23 01:51:07 -04:00
2013-07-31 17:24:22 -07:00
2013-08-31 00:32:32 -04:00
2013-09-23 01:51:08 -04:00
2013-09-23 01:51:08 -04:00
2013-09-23 01:51:08 -04:00
2013-09-23 01:51:08 -04:00
2012-04-16 23:53:11 -04:00
2013-01-03 13:01:30 +01:00
2013-10-10 00:08:07 -04:00
2013-09-23 01:51:08 -04:00
2013-11-05 21:52:27 -05:00
2013-09-23 01:51:09 -04:00
2013-09-20 14:41:02 -04:00
2013-09-23 01:51:09 -04:00
2013-10-01 17:06:14 -04:00
2012-08-06 13:40:47 -07:00
2013-10-23 16:15:01 -04:00
2013-09-23 01:51:09 -04:00
2013-10-21 18:43:02 -04:00
2013-11-04 19:57:59 -05:00
2012-06-09 14:56:12 -07:00
2013-06-04 16:43:42 -07:00
2013-11-07 02:14:33 -05:00
2013-09-23 16:29:40 -04:00
2013-07-27 22:14:06 -07:00
2013-10-29 02:39:13 -07:00
2013-09-23 16:29:40 -04:00
2013-09-23 16:29:41 -04:00
2012-05-16 15:17:08 -04:00
2013-09-23 16:29:41 -04:00
2010-04-22 16:12:36 -07:00
2013-10-09 13:16:36 +02:00