]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_conntrack_ipv6: don't track ICMPv6 negotiation message
authorEric Leblond <eric@inl.fr>
Mon, 9 Feb 2009 22:33:20 +0000 (14:33 -0800)
committerDavid S. Miller <davem@davemloft.net>
Mon, 9 Feb 2009 22:33:20 +0000 (14:33 -0800)
commit31baf40ee409ec82e29154de599676be23defe40
treeff164ddf28a24c7a780393fd91df2dad3e76318b
parent5ab0b211cd8d517b95a116b398543cfa05fa2763
netfilter: nf_conntrack_ipv6: don't track ICMPv6 negotiation message

This patch removes connection tracking handling for ICMPv6 messages
related to Stateless Address Autoconfiguration, MLD, and MLDv2. They
can not be tracked because they are massively using multicast (on
pre-defined address). But they are not invalid and should not be
detected as such.

Signed-off-by: Eric Leblond <eric@inl.fr>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv6/netfilter/nf_conntrack_proto_icmpv6.c