Re: [PATCH] Do not drop DNATed 6to4/6rd packets
From: Hannes Frederic Sowa <hidden>
Date: 2013-09-15 13:14:04
On Sat, Sep 14, 2013 at 01:30:47PM +0300, Catalin(ux) M. BOIE wrote:
From: "Catalin(ux) M. BOIE" <redacted> When a router is doing DNAT for 6to4/6rd packets the latest anti-spoofing patch (218774dc) will drop them because the IPv6 address embedded does not match the IPv4 destination. This patch will allow them to pass by testing if we have an address that matches on 6to4/6rd interface. I have been hit by this problem using Fedora and IPV6TO4_IPV4ADDR. Also, log the dropped packets (with rate limit). Signed-off-by: Catalin(ux) M. BOIE <redacted>
Pretty neat idea, I think. Could you rebase the patch ontop of net or net-next and have a look at the warnings when you feed your patch to ./scripts/checkpatch --strict? Greetings, Hannes