summaryrefslogtreecommitdiff
path: root/Documentation
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2016-09-09 12:42:53 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2016-09-12 18:52:32 +0200
commit71212c9b04eba76faa4dca26ccd1552d6bb300c1 (patch)
treec94e136ed7989fd72d416cd506bcca99b5549472 /Documentation
parent10151d7b03e23afce76a59f717f2616a10ddef86 (diff)
netfilter: nf_tables: don't drop IPv6 packets that cannot parse transport
This is overly conservative and not flexible at all, so better let them go through and let the filtering policy decide what to do with them. We use skb_header_pointer() all over the place so we would just fail to match when trying to access fields from malformed traffic. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'Documentation')
0 files changed, 0 insertions, 0 deletions