diff options
| author |   Patrick McHardy <kaber@trash.net> | 2006-05-29 18:23:54 -0700 |
|---|---|---|
| committer |   David S. Miller <davem@sunset.davemloft.net> | 2006-06-17 21:28:57 -0700 |
| commit | 39a27a35c5c1b5be499a0576a35c45a011788bf8 (patch) | |
| tree | ec5383eec578c455ca5a14184dc9398bbc5f9afb /net/ipv4/netfilter/ip_conntrack_proto_icmp.c | |
| parent | [NETFILTER]: conntrack: don't call helpers for related ICMP messages (diff) | |
| download | linux-dev-39a27a35c5c1b5be499a0576a35c45a011788bf8.tar.xz linux-dev-39a27a35c5c1b5be499a0576a35c45a011788bf8.zip | |
[NETFILTER]: conntrack: add sysctl to disable checksumming
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv4/netfilter/ip_conntrack_proto_icmp.c')
| -rw-r--r-- | net/ipv4/netfilter/ip_conntrack_proto_icmp.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/net/ipv4/netfilter/ip_conntrack_proto_icmp.c b/net/ipv4/netfilter/ip_conntrack_proto_icmp.c index d8b14a9010a6..23f1c504586d 100644 --- a/net/ipv4/netfilter/ip_conntrack_proto_icmp.c +++ b/net/ipv4/netfilter/ip_conntrack_proto_icmp.c @@ -224,7 +224,7 @@ icmp_error(struct sk_buff *skb, enum ip_conntrack_info *ctinfo, } /* See ip_conntrack_proto_tcp.c */ - if (hooknum == NF_IP_PRE_ROUTING && + if (ip_conntrack_checksum && hooknum == NF_IP_PRE_ROUTING && nf_ip_checksum(skb, hooknum, skb->nh.iph->ihl * 4, 0)) { if (LOG_INVALID(IPPROTO_ICMP)) nf_log_packet(PF_INET, 0, skb, NULL, NULL, NULL, |