netdev
[Top] [All Lists]

Re: ip6tables: accept of IPv6 transport esp packages not possible - no r

To: Peter Bieringer <pb@xxxxxxxxxxxx>
Subject: Re: ip6tables: accept of IPv6 transport esp packages not possible - no rule matches
From: Patrick McHardy <kaber@xxxxxxxxx>
Date: Sat, 25 Dec 2004 16:46:23 +0100
Cc: USAGI core <usagi-core@xxxxxxxxxxxxxx>, Maillist netdev <netdev@xxxxxxxxxxx>, Harald Welte <laforge@xxxxxxxxxxxx>, Netfilter development mailing list <netfilter-devel@xxxxxxxxxxxxxxxxxxx>
In-reply-to: <5F6ACA5CEF52DBFBF11FBF94@t1mobil.muc.aerasec.de>
References: <019064D0423CE6C823CBF476@t1mobil.muc.aerasec.de> <5F6ACA5CEF52DBFBF11FBF94@t1mobil.muc.aerasec.de>
Sender: netdev-bounce@xxxxxxxxxxx
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040413 Debian/1.6-5
Peter Bieringer wrote:
Looks like there is something going wrong in the protocol matching algorithm in netfilter6.

Does this patch fix the problem ?

Regards
Patrick
===== net/ipv6/netfilter/ip6_tables.c 1.34 vs edited =====
--- 1.34/net/ipv6/netfilter/ip6_tables.c        2004-11-10 01:44:26 +01:00
+++ edited/net/ipv6/netfilter/ip6_tables.c      2004-12-25 16:42:21 +01:00
@@ -234,7 +234,7 @@
                         * we will change the return 0 to 1*/
                        if ((currenthdr == IPPROTO_NONE) || 
                                (currenthdr == IPPROTO_ESP))
-                               return 0;
+                               break;
 
                        hp = skb_header_pointer(skb, ptr, sizeof(_hdr), &_hdr);
                        BUG_ON(hp == NULL);
<Prev in Thread] Current Thread [Next in Thread>