summaryrefslogtreecommitdiffstats
path: root/net/ipv6
diff options
context:
space:
mode:
authorAlexey Kuznetsov <kuznet@ms2.inr.ac.ru>2011-01-12 08:34:08 +0000
committerDavid S. Miller <davem@davemloft.net>2011-01-12 18:51:55 -0800
commit72b43d0898e97f588293b4a24b33c58c46633d81 (patch)
tree748983e66c649af362b170b3dbd9411e8f87a2d2 /net/ipv6
parent12252771691aaf4935206367e0917a8f697acfcb (diff)
downloadop-kernel-dev-72b43d0898e97f588293b4a24b33c58c46633d81.zip
op-kernel-dev-72b43d0898e97f588293b4a24b33c58c46633d81.tar.gz
inet6: prevent network storms caused by linux IPv6 routers
Linux IPv6 forwards unicast packets, which are link layer multicasts... The hole was present since day one. I was 100% this check is there, but it is not. The problem shows itself, f.e. when Microsoft Network Load Balancer runs on a network. This software resolves IPv6 unicast addresses to multicast MAC addresses. Signed-off-by: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv6')
-rw-r--r--net/ipv6/ip6_output.c3
1 files changed, 3 insertions, 0 deletions
diff --git a/net/ipv6/ip6_output.c b/net/ipv6/ip6_output.c
index 94b5bf1..5f8d242 100644
--- a/net/ipv6/ip6_output.c
+++ b/net/ipv6/ip6_output.c
@@ -401,6 +401,9 @@ int ip6_forward(struct sk_buff *skb)
goto drop;
}
+ if (skb->pkt_type != PACKET_HOST)
+ goto drop;
+
skb_forward_csum(skb);
/*
OpenPOWER on IntegriCloud