diff options
| author |   Vladimir Ratnikov <vratnikov@netgate.com> | 2019-12-20 04:55:50 -0500 |
|---|---|---|
| committer |   Ole Trøan <otroan@employees.org> | 2020-01-03 10:11:05 +0000 |
| commit | 87663cdf644fb7c94c0fec9460829b7e4e7c35ca (patch) | |
| tree | 035e274a906c7d1b6b2ef7b2b51661ed4242d240 /src/plugins/acl/dataplane_node.c | |
| parent | f126e746fc01c75bc99329d10ce9127b26b23814 (diff) | |
map: fix ip4-map-t DF behavior
ip4_is_fragment(header)
or ip4_is_first_fragment(header) didn't changed
when packet with fragmentation needed arrives.
This patch checks DF flag and MTU with packet
length and if DF is set and length > MTU, packet
is dropped. In case if ignore_df is set, DF flag
makes no sense.
Type: fix
Fixes: d6d50cebde647f9a5ee7251a7fef977506f315d7
Signed-off-by: Vladimir Ratnikov <vratnikov@netgate.com>
Change-Id: I720e25167c19a0b13ac5fdfb41b12c0bbdc00d09
Diffstat (limited to 'src/plugins/acl/dataplane_node.c')
0 files changed, 0 insertions, 0 deletions