Florian Westphal e2f387d2df netfilter: conntrack: don't log "invalid" icmpv6 connections ...

When enabling logging for invalid connections we currently also log most
icmpv6 types, which we don't track intentionally (e.g. neigh discovery).
"invalid" should really mean "invalid", i.e. short header or bad checksum.

We don't do any logging for icmp(v4) either, its just useless noise.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2017-08-28 17:53:56 +02:00

..

ip6_tables.c

netfilter: constify nf_loginfo structures

2017-08-02 14:25:59 +02:00

ip6t_ah.c

…

ip6t_eui64.c

…

ip6t_frag.c

…

ip6t_hbh.c

…

ip6t_ipv6header.c

…

ip6t_MASQUERADE.c

netfilter: x_tables: move hook state into xt_action_param structure

2016-11-03 10:56:21 +01:00

ip6t_mh.c

…

ip6t_NPT.c

xtables: extend matches and targets with .usersize

2017-01-09 17:24:55 +01:00

ip6t_REJECT.c

netfilter: x_tables: move hook state into xt_action_param structure

2016-11-03 10:56:21 +01:00

ip6t_rpfilter.c

netfilter: rpfilter: fix incorrect loopback packet judgment

2017-01-16 14:23:01 +01:00

ip6t_rt.c

…

ip6t_SYNPROXY.c

netfilter: nf_hook_ops structs can be const

2017-07-31 19:10:44 +02:00

ip6table_filter.c

netfilter: xtables: don't hook tables by default

2016-03-02 20:05:24 +01:00

ip6table_mangle.c

netfilter: x_tables: simplify ip{6}table_mangle_hook()

2016-07-01 16:37:02 +02:00

ip6table_nat.c

netfilter: nf_hook_ops structs can be const

2017-07-31 19:10:44 +02:00

ip6table_raw.c

netfilter: xtables: don't hook tables by default

2016-03-02 20:05:24 +01:00

ip6table_security.c

netfilter: xtables: don't hook tables by default

2016-03-02 20:05:24 +01:00

Kconfig

netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c

2016-11-01 20:50:31 +01:00

Makefile

netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c

2016-11-01 20:50:31 +01:00

nf_conntrack_l3proto_ipv6.c

netfilter: conntrack: place print_tuple in procfs part

2017-08-24 18:52:32 +02:00

nf_conntrack_proto_icmpv6.c

netfilter: conntrack: don't log "invalid" icmpv6 connections

2017-08-28 17:53:56 +02:00

nf_conntrack_reasm.c

ipv6: orphan skbs in reassembly unit

2017-03-01 20:55:57 -08:00

nf_defrag_ipv6_hooks.c

netfilter: nf_hook_ops structs can be const

2017-07-31 19:10:44 +02:00

nf_dup_ipv6.c

netfilter: kill the fake untracked conntrack objects

2017-04-15 11:47:57 +02:00

nf_log_ipv6.c

netfilter: constify nf_loginfo structures

2017-08-02 14:25:59 +02:00

nf_nat_l3proto_ipv6.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf

2017-05-03 10:11:26 -04:00

nf_nat_masquerade_ipv6.c

netfilter: conntrack: rename nf_ct_iterate_cleanup

2017-05-29 12:46:08 +02:00

nf_nat_proto_icmpv6.c

…

nf_reject_ipv6.c

networking: make skb_put & friends return void pointers

2017-06-16 11:48:39 -04:00

nf_socket_ipv6.c

netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c

2016-11-01 20:50:31 +01:00

nf_tables_ipv6.c

netfilter: Add the missed return value check of nft_register_chain_type

2016-09-12 19:54:45 +02:00

nft_chain_nat_ipv6.c

…

nft_chain_route_ipv6.c

Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2016-09-25 23:34:19 +02:00

nft_dup_ipv6.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2016-11-15 10:54:36 -05:00

nft_fib_ipv6.c

netfilter: nf_tables: fib: use skb_header_pointer

2017-07-31 19:01:39 +02:00

nft_masq_ipv6.c

netfilter: nf_tables: fix mismatch in big-endian system

2017-03-13 13:30:28 +01:00

nft_redir_ipv6.c

netfilter: nf_tables: fix mismatch in big-endian system

2017-03-13 13:30:28 +01:00

nft_reject_ipv6.c

netfilter: nf_tables: use hook state from xt_action_param structure

2016-11-03 11:52:34 +01:00