diff options
| author | Jan Engelhardt <jengelh@medozas.de> | 2010-04-13 17:28:11 +0400 |
|---|---|---|
| committer | Patrick McHardy <kaber@trash.net> | 2010-04-13 17:28:11 +0400 |
| commit | 9e50849054a4824f06c66d2b449de21b98e03770 (patch) | |
| tree | c5b48b8786af6111373d8646c5920c67a7002b97 /include/linux | |
| parent | 9f93ff5be54108066372d1c4100c515d9d9acc1b (diff) | |
| download | linux-9e50849054a4824f06c66d2b449de21b98e03770.tar.xz | |
netfilter: ipv6: move POSTROUTING invocation before fragmentation
Patrick McHardy notes: "We used to invoke IPv4 POST_ROUTING after
fragmentation as well just to defragment the packets in conntrack
immediately afterwards, but that got changed during the
netfilter-ipsec integration. Ideally IPv6 would behave like IPv4."
This patch makes it so. Sending an oversized frame (e.g. `ping6
-s64000 -c1 ::1`) will now show up in POSTROUTING as a single skb
rather than multiple ones.
Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Diffstat (limited to 'include/linux')
0 files changed, 0 insertions, 0 deletions