Kevin Mitchell 4f9bd53084 netfilter: conntrack: skip verification of zero UDP checksum ...

The checksum is optional for UDP packets. However nf_reject would
previously require a valid checksum to elicit a response such as
ICMP_DEST_UNREACH.

Add some logic to nf_reject_verify_csum to determine if a UDP packet has
a zero checksum and should therefore not be verified.

Signed-off-by: Kevin Mitchell <[email protected]>
Signed-off-by: Pablo Neira Ayuso <[email protected]>

2022-05-13 18:56:28 +02:00

..

ip6_tables.c

…

ip6t_ah.c

…

ip6t_eui64.c

…

ip6t_frag.c

…

ip6t_hbh.c

…

ip6t_ipv6header.c

…

ip6t_mh.c

…

ip6t_NPT.c

…

ip6t_REJECT.c

…

ip6t_rpfilter.c

…

ip6t_rt.c

…

ip6t_srh.c

…

ip6t_SYNPROXY.c

…

ip6table_filter.c

…

ip6table_mangle.c

…

ip6table_nat.c

…

ip6table_raw.c

…

ip6table_security.c

…

Kconfig

netfilter: Remove flowtable relics

2022-01-27 00:00:20 +01:00

Makefile

netfilter: Remove flowtable relics

2022-01-27 00:00:20 +01:00

nf_conntrack_reasm.c

net: ipv6: Handle delivery_time in ipv6 defrag

2022-03-03 14:38:48 +00:00

nf_defrag_ipv6_hooks.c

…

nf_dup_ipv6.c

…

nf_reject_ipv6.c

netfilter: conntrack: skip verification of zero UDP checksum

2022-05-13 18:56:28 +02:00

nf_socket_ipv6.c

…

nf_tproxy_ipv6.c

…

nft_dup_ipv6.c

netfilter: nf_tables: do not reduce read-only expressions

2022-03-20 00:29:46 +01:00

nft_fib_ipv6.c

netfilter: nft_fib: reverse path filter for policy-based routing on iif

2022-04-11 12:10:09 +02:00

nft_reject_ipv6.c

netfilter: nf_tables: do not reduce read-only expressions

2022-03-20 00:29:46 +01:00