Re: [PATCH net V2] netfilter: Drop fragmented ndisc packets assembled in netfilter

2020-10-20 Thread Pablo Neira Ayuso
On Tue, Oct 13, 2020 at 02:23:12PM +0200, Georg Kohmann wrote: > Fragmented ndisc packets assembled in netfilter not dropped as specified > in RFC 6980, section 5. This behaviour breaks TAHI IPv6 Core Conformance > Tests v6LC.2.1.22/23, V6LC.2.2.26/27 and V6LC.2.3.18. > > Setting IP6SKB_FRAGMENTED

[PATCH net V2] netfilter: Drop fragmented ndisc packets assembled in netfilter

2020-10-13 Thread Georg Kohmann
Fragmented ndisc packets assembled in netfilter not dropped as specified in RFC 6980, section 5. This behaviour breaks TAHI IPv6 Core Conformance Tests v6LC.2.1.22/23, V6LC.2.2.26/27 and V6LC.2.3.18. Setting IP6SKB_FRAGMENTED flag during reassembly. References: commit b800c3b966bc ("ipv6: drop fr