iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/net/ipv6/netfilter
History
Georg Kohmann 68f9f9c2c3 netfilter: Drop fragmented ndisc packets assembled in netfilter 
Fragmented ndisc packets assembled in netfilter not dropped as specified
in RFC 6980, section 5. This behaviour breaks TAHI IPv6 Core Conformance
Tests v6LC.2.1.22/23, V6LC.2.2.26/27 and V6LC.2.3.18.

Setting IP6SKB_FRAGMENTED flag during reassembly.

References: commit b800c3b966bc ("ipv6: drop fragmented ndisc packets by default (RFC 6980)")
Signed-off-by: Georg Kohmann <geokohma@cisco.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2020-10-20 13:54:53 +02:00
..
ip6_tables.c
net: remove sockptr_advance
2020-07-28 13:43:40 -07:00
ip6t_ah.c
netfilter: ip6tables: Remove redundant null checks
2020-07-29 20:39:43 +02:00
ip6t_eui64.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
ip6t_frag.c
netfilter: ip6tables: Remove redundant null checks
2020-07-29 20:39:43 +02:00
ip6t_hbh.c
netfilter: ip6tables: Remove redundant null checks
2020-07-29 20:39:43 +02:00
ip6t_ipv6header.c
netfilter: move inline nf_ip6_ext_hdr() function to a more appropriate header.
2019-09-13 12:34:09 +02:00
ip6t_mh.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
ip6t_NPT.c
netfilter: ip6t_NPT: rewrite addresses in ICMPv6 original packet
2020-08-28 19:18:48 +02:00
ip6t_REJECT.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
ip6t_rpfilter.c
netfilter: Fix rpfilter dropping vrf packets by mistake
2019-07-16 13:16:47 +02:00
ip6t_rt.c
netfilter: ip6tables: Remove redundant null checks
2020-07-29 20:39:43 +02:00
ip6t_srh.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 152
2019-05-30 11:26:32 -07:00
ip6t_SYNPROXY.c
netfilter: Add MODULE_DESCRIPTION entries to kernel modules
2020-06-25 00:50:31 +02:00
ip6table_filter.c
netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c.
2020-06-25 00:50:31 +02:00
ip6table_mangle.c
netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c.
2020-06-25 00:50:31 +02:00
ip6table_nat.c
netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c.
2020-06-25 00:50:31 +02:00
ip6table_raw.c
netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c.
2020-06-25 00:50:31 +02:00
ip6table_security.c
netfilter: ip6tables: Add a .pre_exit hook in all ip6table_foo.c.
2020-06-25 00:50:31 +02:00
Kconfig
treewide: replace '---help---' in Kconfig files with 'help'
2020-06-14 01:57:21 +09:00
Makefile
netfilter: x_tables: merge ip and ipv6 masquerade modules
2019-04-11 20:59:29 +02:00
nf_conntrack_reasm.c
netfilter: Drop fragmented ndisc packets assembled in netfilter
2020-10-20 13:54:53 +02:00
nf_defrag_ipv6_hooks.c
treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500
2019-06-19 17:09:55 +02:00
nf_dup_ipv6.c
netfilter: drop bridge nf reset from nf_reset
2019-10-01 18:42:15 +02:00
nf_flow_table_ipv6.c
netfilter: Add MODULE_DESCRIPTION entries to kernel modules
2020-06-25 00:50:31 +02:00
nf_log_ipv6.c
netfilter: nf_log: missing vlan offload tag and proto
2020-10-14 01:25:14 +02:00
nf_reject_ipv6.c
netfilter: introduce support for reject at prerouting stage
2020-06-30 18:21:02 +02:00
nf_socket_ipv6.c
treewide: Remove uninitialized_var() usage
2020-07-16 12:35:15 -07:00
nf_tproxy_ipv6.c
netfilter: nft_tproxy: Fix typo in IPv6 module description.
2019-10-17 12:21:11 +02:00
nft_dup_ipv6.c
netfilter: Add MODULE_DESCRIPTION entries to kernel modules
2020-06-25 00:50:31 +02:00
nft_fib_ipv6.c
netfilter: Add MODULE_DESCRIPTION entries to kernel modules
2020-06-25 00:50:31 +02:00
nft_reject_ipv6.c
netfilter: Add MODULE_DESCRIPTION entries to kernel modules
2020-06-25 00:50:31 +02:00