[PATCH] make ipv6_find_hdr() find transport protocol header

Patrick McHardy kaber at trash.net
Sun Oct 30 15:58:45 CET 2005


Yasuyuki KOZAKAI wrote:
> From: Patrick McHardy <kaber at trash.net>
> Date: Sat, 17 Sep 2005 21:25:02 +0200
> 
>>This patch looks great, applied. It looks like we could also replace
>>the code in ip6_packet_match, the special treatment of IPPROTO_ESP
>>doesn't look right anyway.
> 
> Sounds good. ESP handling isn't difficult because ipv6_ext_hdr() doesn't
> check ESP. But special handling of Fragment header is necessary, to get
> "next header" field and fragment offset in it if packet isn't 1st fragment.
> 
> Note that I didn't unify ipv6_skip_hder() because I plans a optimization around
> this.
> 
> I've tested this patch with AH, ESP, Fragment header combinations, but
> have not tested with other extension headers because now I'm on trip and
> have only a laptop, sorry.

Finally applied, sorry for the delay.



More information about the netfilter-devel mailing list