OSDN Git Service

ipvs: do not schedule icmp errors from tunnels
authorJulian Anastasov <ja@ssi.bg>
Sun, 31 Mar 2019 10:24:52 +0000 (13:24 +0300)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sat, 13 Apr 2019 12:52:57 +0000 (14:52 +0200)
commit0261ea1bd1eb0da5c0792a9119b8655cf33c80a3
tree88da52e71fa17b02ef40b4b33f2fdf685335269d
parent8176c8332751bf27597488d6e45c9b8f530593bf
ipvs: do not schedule icmp errors from tunnels

We can receive ICMP errors from client or from
tunneling real server. While the former can be
scheduled to real server, the latter should
not be scheduled, they are decapsulated only when
existing connection is found.

Fixes: 6044eeffafbe ("ipvs: attempt to schedule icmp packets")
Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Simon Horman <horms@verge.net.au>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/ipvs/ip_vs_core.c