diff options
| author |   Jan Engelhardt <jengelh@medozas.de> | 2010-04-13 15:28:11 +0200 |
|---|---|---|
| committer |   Patrick McHardy <kaber@trash.net> | 2010-04-13 15:28:11 +0200 |
| commit | 9e50849054a4824f06c66d2b449de21b98e03770 (patch) | |
| tree | c5b48b8786af6111373d8646c5920c67a7002b97 /include/linux/ipv6.h | |
| parent | Restore __ALIGN_MASK() (diff) | |
| download | linux-dev-9e50849054a4824f06c66d2b449de21b98e03770.tar.xz linux-dev-9e50849054a4824f06c66d2b449de21b98e03770.zip | |
netfilter: ipv6: move POSTROUTING invocation before fragmentation
Patrick McHardy notes: "We used to invoke IPv4 POST_ROUTING after
fragmentation as well just to defragment the packets in conntrack
immediately afterwards, but that got changed during the
netfilter-ipsec integration. Ideally IPv6 would behave like IPv4."
This patch makes it so. Sending an oversized frame (e.g. `ping6
-s64000 -c1 ::1`) will now show up in POSTROUTING as a single skb
rather than multiple ones.
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'include/linux/ipv6.h')
0 files changed, 0 insertions, 0 deletions