ip: reject too-big defragmented DF-skb when forwarding
authorFlorian Westphal <fw@strlen.de>
Thu, 21 May 2015 22:06:40 +0000 (00:06 +0200)
committerDavid S. Miller <davem@davemloft.net>
Mon, 25 May 2015 04:08:48 +0000 (00:08 -0400)
commitcf826244322443215c156c0751fa2c982969a9c9
tree31f552f87a5ed28fb63187e77f2a5802a863ec3b
parentb10e3d6c2e557e1dd62c0b6276707b68aa0e5287
ip: reject too-big defragmented DF-skb when forwarding

Send icmp pmtu error if we find that the largest fragment of df-skb
exceeded the output path mtu.

The ip output path will still catch this later on but we can avoid the
forward/postrouting hook traversal by rejecting right away.

This is what ipv6 already does.

Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/ipv4/ip_forward.c