anonfunc/xtables-addons
1
0
Fork 0
mirror of git://git.code.sf.net/p/xtables-addons/xtables-addons synced 2025-09-13 16:14:57 +02:00
Code Issues Releases Wiki Activity

xt_TEE: set dont-fragment on cloned packets

Browse Source
This commit is contained in:
Jan Engelhardt
2010-03-26 23:48:29 +01:00
parent fd19a40dbe
commit ba35636718
2 changed files with 10 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
doc/changelog.txt
View File

@@ -3,6 +3,7 @@ HEAD
==== ====
- TEE: do rechecksumming in PREROUTING too - TEE: do rechecksumming in PREROUTING too
- TEE: decrease TTL on cloned packet - TEE: decrease TTL on cloned packet
- TEE: set dont-fragment on cloned packets
Xtables-addons 1.24 (March 17 2010) Xtables-addons 1.24 (March 17 2010)

12
extensions/xt_TEE.c
View File

@@ -145,6 +145,7 @@ tee_tg4(struct sk_buff **pskb, const struct xt_target_param *par)
{ {
const struct xt_tee_tginfo *info = par->targinfo; const struct xt_tee_tginfo *info = par->targinfo;
struct sk_buff *skb = *pskb; struct sk_buff *skb = *pskb;
struct iphdr *iph;
#ifdef WITH_CONNTRACK #ifdef WITH_CONNTRACK
if (skb->nfct == &tee_track.ct_general) { if (skb->nfct == &tee_track.ct_general) {
@@ -172,14 +173,17 @@ tee_tg4(struct sk_buff **pskb, const struct xt_target_param *par)
* *
* We also decrease the TTL to mitigate potential TEE loops * We also decrease the TTL to mitigate potential TEE loops
* between two hosts. * between two hosts.
*
* Set %IP_DF so that the original source is notified of a potentially
* decreased MTU on the clone route. IPv6 does this too.
*/ */
iph = ip_hdr(skb);
iph->frag_off |= htons(IP_DF);
if (par->hooknum == NF_INET_PRE_ROUTING || if (par->hooknum == NF_INET_PRE_ROUTING ||
par->hooknum == NF_INET_LOCAL_IN) { par->hooknum == NF_INET_LOCAL_IN)
struct iphdr *iph = ip_hdr(skb);
--iph->ttl; --iph->ttl;
ip_send_check(iph); ip_send_check(iph);
}
#ifdef WITH_CONNTRACK #ifdef WITH_CONNTRACK
/* /*
* Tell conntrack to forget this packet since it may get confused * Tell conntrack to forget this packet since it may get confused