Re: [PATCH nf-next v3] netfilter: conntrack: skip verification of zero UDP checksum
From: Pablo Neira Ayuso <pablo@netfilter.org>
Date: 2022-05-09 06:21:07
Also in:
lkml, netfilter-devel
On Fri, Apr 29, 2022 at 08:40:27PM -0700, Kevin Mitchell wrote:
The checksum is optional for UDP packets. However nf_reject would previously require a valid checksum to elicit a response such as ICMP_DEST_UNREACH. Add some logic to nf_reject_verify_csum to determine if a UDP packet has a zero checksum and should therefore not be verified.
Applied.