| commit | 0261ea1bd1eb0da5c0792a9119b8655cf33c80a3 | [log] [tgz] |
|---|---|---|
| author | Julian Anastasov <ja@ssi.bg> | Sun Mar 31 13:24:52 2019 +0300 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Sat Apr 13 14:52:57 2019 +0200 |
| tree | 88da52e71fa17b02ef40b4b33f2fdf685335269d | |
| parent | 8176c8332751bf27597488d6e45c9b8f530593bf [diff] |
ipvs: do not schedule icmp errors from tunnels
We can receive ICMP errors from client or from
tunneling real server. While the former can be
scheduled to real server, the latter should
not be scheduled, they are decapsulated only when
existing connection is found.
Fixes: 6044eeffafbe ("ipvs: attempt to schedule icmp packets")
Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Simon Horman <horms@verge.net.au>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>