aboutsummaryrefslogtreecommitdiffstats
path: root/include
diff options
context:
space:
mode:
authorStephen Suryaputra <ssuryaextr@gmail.com>2019-03-20 10:29:27 -0400
committerDavid S. Miller <davem@davemloft.net>2019-03-20 16:29:37 -0700
commit0b03a5ca8b14321366eec4a903922d2b46d585ff (patch)
treedd57f1bdfad2cdd949bde6d02fafa392fd374001 /include
parentnet: isdn: Make isdn_ppp_mp_discard and isdn_ppp_mp_reassembly static (diff)
downloadlinux-dev-0b03a5ca8b14321366eec4a903922d2b46d585ff.tar.xz
linux-dev-0b03a5ca8b14321366eec4a903922d2b46d585ff.zip
ipv6: Add icmp_echo_ignore_anycast for ICMPv6
In addition to icmp_echo_ignore_multicast, there is a need to also prevent responding to pings to anycast addresses for security. Signed-off-by: Stephen Suryaputra <ssuryaextr@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'include')
-rw-r--r--include/net/netns/ipv6.h1
1 files changed, 1 insertions, 0 deletions
diff --git a/include/net/netns/ipv6.h b/include/net/netns/ipv6.h
index e29aff15acc9..64e29b58bb5e 100644
--- a/include/net/netns/ipv6.h
+++ b/include/net/netns/ipv6.h
@@ -34,6 +34,7 @@ struct netns_sysctl_ipv6 {
int icmpv6_time;
int icmpv6_echo_ignore_all;
int icmpv6_echo_ignore_multicast;
+ int icmpv6_echo_ignore_anycast;
int anycast_src_echo_reply;
int ip_nonlocal_bind;
int fwmark_reflect;