diff options
| author |   Andrea Claudi <aclaudi@redhat.com> | 2019-02-11 16:14:39 +0100 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2019-02-12 11:24:01 +0100 |
| commit | 098e13f5b21d3398065fce8780f07a3ef62f4812 (patch) | |
| tree | a242576ffcfdb8a90388e475d3ad2d7cfa574fcf /net/netfilter/ipvs/Kconfig | |
| parent | netfilter: compat: initialize all fields in xt_init (diff) | |
| download | linux-dev-098e13f5b21d3398065fce8780f07a3ef62f4812.tar.xz linux-dev-098e13f5b21d3398065fce8780f07a3ef62f4812.zip | |
ipvs: fix dependency on nf_defrag_ipv6
ipvs relies on nf_defrag_ipv6 module to manage IPv6 fragmentation,
but lacks proper Kconfig dependencies and does not explicitly
request defrag features.
As a result, if netfilter hooks are not loaded, when IPv6 fragmented
packet are handled by ipvs only the first fragment makes through.
Fix it properly declaring the dependency on Kconfig and registering
netfilter hooks on ip_vs_add_service() and ip_vs_new_dest().
Reported-by: Li Shuang <shuali@redhat.com>
Signed-off-by: Andrea Claudi <aclaudi@redhat.com>
Acked-by: Julian Anastasov <ja@ssi.bg>
Acked-by: Simon Horman <horms@verge.net.au>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/ipvs/Kconfig')
| -rw-r--r-- | net/netfilter/ipvs/Kconfig | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/net/netfilter/ipvs/Kconfig b/net/netfilter/ipvs/Kconfig index cad48d07c818..8401cefd9f65 100644 --- a/net/netfilter/ipvs/Kconfig +++ b/net/netfilter/ipvs/Kconfig @@ -29,6 +29,7 @@ config IP_VS_IPV6 bool "IPv6 support for IPVS" depends on IPV6 = y || IP_VS = IPV6 select IP6_NF_IPTABLES + select NF_DEFRAG_IPV6 ---help--- Add IPv6 support to IPVS. |