Skip to content

Commit

Permalink
inet6: prevent network storms caused by linux IPv6 routers
Browse files Browse the repository at this point in the history
Linux IPv6 forwards unicast packets, which are link layer multicasts...
The hole was present since day one. I was 100% this check is there, but it is not.

The problem shows itself, f.e. when Microsoft Network Load Balancer runs on a network.
This software resolves IPv6 unicast addresses to multicast MAC addresses.

Signed-off-by: Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
Signed-off-by: David S. Miller <davem@davemloft.net>
  • Loading branch information
Alexey Kuznetsov authored and David S. Miller committed Jan 13, 2011
1 parent 1225277 commit 72b43d0
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions net/ipv6/ip6_output.c
Original file line number Diff line number Diff line change
Expand Up @@ -401,6 +401,9 @@ int ip6_forward(struct sk_buff *skb)
goto drop;
}

if (skb->pkt_type != PACKET_HOST)
goto drop;

skb_forward_csum(skb);

/*
Expand Down

0 comments on commit 72b43d0

Please sign in to comment.