Re: [PATCH net] ipv6/netfilter: Discard first fragment not including all headers

2020-11-04 Thread Georg Kohmann (geokohma)
On 04.11.2020 14:41, Pablo Neira Ayuso wrote: > Hi, > > On Wed, Nov 04, 2020 at 02:01:28PM +0100, Georg Kohmann wrote: >> Packets are processed even though the first fragment don't include all >> headers through the upper layer header. This breaks TAHI IPv6 Core >> Conformance Test v6LC.1.3.6. >> >

Re: [PATCH net] ipv6/netfilter: Discard first fragment not including all headers

2020-11-04 Thread Pablo Neira Ayuso
Hi, On Wed, Nov 04, 2020 at 02:01:28PM +0100, Georg Kohmann wrote: > Packets are processed even though the first fragment don't include all > headers through the upper layer header. This breaks TAHI IPv6 Core > Conformance Test v6LC.1.3.6. > > Referring to RFC8200 SECTION 4.5: "If the first fragm