| To: | Peter Bieringer <pb@xxxxxxxxxxxx> |
|---|---|
| Subject: | Re: ip6tables: accept of IPv6 transport esp packages not possible - no rule matches |
| From: | Patrick McHardy <kaber@xxxxxxxxx> |
| Date: | Sat, 25 Dec 2004 16:46:23 +0100 |
| Cc: | USAGI core <usagi-core@xxxxxxxxxxxxxx>, Maillist netdev <netdev@xxxxxxxxxxx>, Harald Welte <laforge@xxxxxxxxxxxx>, Netfilter development mailing list <netfilter-devel@xxxxxxxxxxxxxxxxxxx> |
| In-reply-to: | <5F6ACA5CEF52DBFBF11FBF94@xxxxxxxxxxxxxxxxxxxxxx> |
| References: | <019064D0423CE6C823CBF476@xxxxxxxxxxxxxxxxxxxxxx> <5F6ACA5CEF52DBFBF11FBF94@xxxxxxxxxxxxxxxxxxxxxx> |
| Sender: | netdev-bounce@xxxxxxxxxxx |
| User-agent: | Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040413 Debian/1.6-5 |
Peter Bieringer wrote: Looks like there is something going wrong in the protocol matching algorithm in netfilter6. Does this patch fix the problem ? Regards Patrick ===== net/ipv6/netfilter/ip6_tables.c 1.34 vs edited =====
--- 1.34/net/ipv6/netfilter/ip6_tables.c 2004-11-10 01:44:26 +01:00
+++ edited/net/ipv6/netfilter/ip6_tables.c 2004-12-25 16:42:21 +01:00
@@ -234,7 +234,7 @@
* we will change the return 0 to 1*/
if ((currenthdr == IPPROTO_NONE) ||
(currenthdr == IPPROTO_ESP))
- return 0;
+ break;
hp = skb_header_pointer(skb, ptr, sizeof(_hdr), &_hdr);
BUG_ON(hp == NULL);
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [patch 1/1] net/3c59x: module_param conversions, domen |
|---|---|
| Next by Date: | netfilter6: ICMPv6 type 143 doesn't match, Peter Bieringer |
| Previous by Thread: | Re: ip6tables: accept of IPv6 transport esp packages not possible - no rule matches, Peter Bieringer |
| Next by Thread: | Hi, Nick. In this archive you can find all those things, you asked me., gtq |
| Indexes: | [Date] [Thread] [Top] [All Lists] |