[LAC-TF] Fwd: [RFC PATCH net-next] ipv6: stop sending PTB packets for MTU < 1280
Fernando Gont
fgont at si6networks.com
Tue Aug 26 14:42:37 BRT 2014
Estimados,
FYI. (genial!)
-------- Forwarded Message --------
Subject: [RFC PATCH net-next] ipv6: stop sending PTB packets for MTU < 1280
Date: Tue, 26 Aug 2014 00:25:45 +0200
From: Hagen Paul Pfeifer <hagen at jauu.net>
To: netdev at vger.kernel.org
CC: Hagen Paul Pfeifer <hagen at jauu.net>, Fernando Gont
<fgont at si6networks.com>
Reduce the attack vector and stop generating ICMPv6 packet to big for
packets smaller then the minimal required IPv6 MTU.
See
http://tools.ietf.org/html/draft-gont-6man-deprecate-atomfrag-generation-00
Signed-off-by: Hagen Paul Pfeifer <hagen at jauu.net>
---
net/ipv6/route.c | 7 ++-----
1 file changed, 2 insertions(+), 5 deletions(-)
diff --git a/net/ipv6/route.c b/net/ipv6/route.c
index f74b041..84ebacd 100644
--- a/net/ipv6/route.c
+++ b/net/ipv6/route.c
@@ -1154,12 +1154,9 @@ static void ip6_rt_update_pmtu(struct dst_entry
*dst, struct sock *sk,
struct net *net = dev_net(dst->dev);
rt6->rt6i_flags |= RTF_MODIFIED;
- if (mtu < IPV6_MIN_MTU) {
- u32 features = dst_metric(dst, RTAX_FEATURES);
+ if (mtu < IPV6_MIN_MTU)
mtu = IPV6_MIN_MTU;
- features |= RTAX_FEATURE_ALLFRAG;
- dst_metric_set(dst, RTAX_FEATURES, features);
- }
+
dst_metric_set(dst, RTAX_MTU, mtu);
rt6_update_expires(rt6, net->ipv6.sysctl.ip6_rt_mtu_expires);
}
--
2.1.0
More information about the LACTF
mailing list