aboutsummaryrefslogtreecommitdiffstats
path: root/net
diff options
context:
space:
mode:
authorVille Nuorvala <vnuorval@tcs.hut.fi>2006-09-22 17:42:18 -0400
committerDavid S. Miller <davem@sunset.davemloft.net>2006-09-22 18:20:22 -0400
commit74553b09dcd9194cbda737016f0b89f245145670 (patch)
tree75c131a859fa6152dd62913617bc8225f54c5b93 /net
parente21e0b5f19ac7835a244c2016f7ed726f971b3e9 (diff)
[IPV6]: Don't forward packets to proxied link-local address.
Proxying router can't forward traffic sent to link-local address, so signal the sender and discard the packet. This behavior is clarified by Mobile IPv6 specification (RFC3775) but might be required for all proxying router. Based on MIPL2 kernel patch. Signed-off-by: Ville Nuorvala <vnuorval@tcs.hut.fi> Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org> Signed-off-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Diffstat (limited to 'net')
-rw-r--r--net/ipv6/ip6_output.c17
1 files changed, 16 insertions, 1 deletions
diff --git a/net/ipv6/ip6_output.c b/net/ipv6/ip6_output.c
index 0f56e9e69a8f..b2be749d2217 100644
--- a/net/ipv6/ip6_output.c
+++ b/net/ipv6/ip6_output.c
@@ -345,6 +345,16 @@ static int ip6_forward_proxy_check(struct sk_buff *skb)
345 } 345 }
346 } 346 }
347 347
348 /*
349 * The proxying router can't forward traffic sent to a link-local
350 * address, so signal the sender and discard the packet. This
351 * behavior is clarified by the MIPv6 specification.
352 */
353 if (ipv6_addr_type(&hdr->daddr) & IPV6_ADDR_LINKLOCAL) {
354 dst_link_failure(skb);
355 return -1;
356 }
357
348 return 0; 358 return 0;
349} 359}
350 360
@@ -403,8 +413,13 @@ int ip6_forward(struct sk_buff *skb)
403 } 413 }
404 414
405 if (pneigh_lookup(&nd_tbl, &hdr->daddr, skb->dev, 0)) { 415 if (pneigh_lookup(&nd_tbl, &hdr->daddr, skb->dev, 0)) {
406 if (ip6_forward_proxy_check(skb)) 416 int proxied = ip6_forward_proxy_check(skb);
417 if (proxied > 0)
407 return ip6_input(skb); 418 return ip6_input(skb);
419 else if (proxied < 0) {
420 IP6_INC_STATS(IPSTATS_MIB_INDISCARDS);
421 goto drop;
422 }
408 } 423 }
409 424
410 if (!xfrm6_route_forward(skb)) { 425 if (!xfrm6_route_forward(skb)) {