Files
linux/include/net
Alin Nastac 7fc3822536 netfilter: reject: skip csum verification for protocols that don't support it
Some protocols have other means to verify the payload integrity
(AH, ESP, SCTP) while others are incompatible with nf_ip(6)_checksum
implementation because checksum is either optional or might be
partial (UDPLITE, DCCP, GRE). Because nf_ip(6)_checksum was used
to validate the packets, ip(6)tables REJECT rules were not capable
to generate ICMP(v6) errors for the protocols mentioned above.

This commit also fixes the incorrect pseudo-header protocol used
for IPv4 packets that carry other transport protocols than TCP or
UDP (pseudo-header used protocol 0 iso the proper value).

Signed-off-by: Alin Nastac <alin.nastac@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2019-02-13 10:03:53 +01:00
..
2018-09-08 01:39:47 +09:00
2018-09-18 19:55:01 -07:00
2018-12-10 15:54:34 -08:00
2018-10-31 12:37:12 -07:00
2019-01-23 11:18:00 -08:00
2018-09-26 20:22:19 -07:00
2018-07-30 09:10:25 -07:00
2019-01-25 10:53:23 -08:00
2018-11-07 23:00:23 -08:00
2018-11-07 16:23:05 -08:00
2018-09-13 09:04:58 -07:00
2018-09-25 20:17:35 -07:00
2018-05-16 07:23:35 +02:00
2018-06-22 13:43:27 +09:00
2018-12-20 16:56:04 -08:00
2019-01-01 09:47:59 -08:00
2019-01-25 22:41:08 -08:00
2019-01-25 01:50:03 +01:00
2018-08-29 12:25:53 -07:00