Kevin Mitchell 4f9bd53084 netfilter: conntrack: skip verification of zero UDP checksum
The checksum is optional for UDP packets. However nf_reject would
previously require a valid checksum to elicit a response such as
ICMP_DEST_UNREACH.

Add some logic to nf_reject_verify_csum to determine if a UDP packet has
a zero checksum and should therefore not be verified.

Signed-off-by: Kevin Mitchell <kevmitch@arista.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2022-05-13 18:56:28 +02:00
..
2021-06-30 15:51:09 -07:00
2022-04-12 14:56:33 -07:00
2021-05-17 15:29:35 -07:00
2021-11-14 12:20:44 +00:00
2021-10-13 09:41:37 -07:00
2021-10-13 09:41:37 -07:00
2021-06-30 15:51:09 -07:00
2021-10-13 09:41:37 -07:00
2022-04-12 14:56:33 -07:00
2021-05-17 15:29:35 -07:00
2021-11-16 19:07:54 -08:00
2021-05-17 15:29:35 -07:00
2021-05-17 15:29:35 -07:00