tree c5b48b8786af6111373d8646c5920c67a7002b97
parent 9f93ff5be54108066372d1c4100c515d9d9acc1b
author Jan Engelhardt <jengelh@medozas.de> 1271165291 +0200
committer Patrick McHardy <kaber@trash.net> 1271165291 +0200

netfilter: ipv6: move POSTROUTING invocation before fragmentation

Patrick McHardy notes: "We used to invoke IPv4 POST_ROUTING after
fragmentation as well just to defragment the packets in conntrack
immediately afterwards, but that got changed during the
netfilter-ipsec integration. Ideally IPv6 would behave like IPv4."

This patch makes it so. Sending an oversized frame (e.g. `ping6
-s64000 -c1 ::1`) will now show up in POSTROUTING as a single skb
rather than multiple ones.

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>