| commit | e75b3e1c9bc5b997d09bdf8eb72ab3dd3c1a7072 | [log] [tgz] |
|---|---|---|
| author | Florian Westphal <fw@strlen.de> | Tue May 21 13:24:30 2019 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Wed May 22 10:51:49 2019 +0200 |
| tree | 767e4fd65dd100d9df194a9f5ef588a41b079737 | |
| parent | 6bac76db1da3cb162c425d58ae421486f8e43955 [diff] |
netfilter: nf_flow_table: ignore DF bit setting Its irrelevant if the DF bit is set or not, we must pass packet to stack in either case. If the DF bit is set, we must pass it to stack so the appropriate ICMP error can be generated. If the DF is not set, we must pass it to stack for fragmentation. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>