[PATCH v2] vti: use right inner_mode for inbound inter address family policy checks

2016-09-07 Thread thomas . zeitlhofer+lkml
in xfrm_input() (i.e., also increment LINUX_MIB_XFRMINSTATEMODEERROR in case of error), to select the inner_mode that contains the right address family for the inbound policy checks. Signed-off-by: Thomas Zeitlhofer <thomas.zeitlhofer+l...@ze-it.at> --- Notes: v2: implement review comments from S

[PATCH] vti: use right inner_mode for inbound inter address family policy checks

2016-09-04 Thread Thomas Zeitlhofer
in xfrm_prepare_input and xfrm_input) to select the inner_mode that contains the right address family for the inbound policy checks. Signed-off-by: Thomas Zeitlhofer <thomas.zeitlhofer+l...@ze-it.at> --- Notes: The patch was developed by looking at the code, but without knowledge of the XFR

Re: bridge+netfilter broken for IP fragments in 2.6.16?

2006-04-02 Thread Thomas Zeitlhofer
On Sun, Apr 02, 2006 at 09:19:30PM +0200, Patrick McHardy wrote: Thomas Zeitlhofer wrote: I have set up a bridge with two ports: # brctl show br0 bridge name bridge id STP enabled interfaces br0 8000.21f23d58 no eth1

Re: bridge+netfilter broken for IP fragments in 2.6.16?

2006-04-02 Thread Thomas Zeitlhofer
On Mon, Apr 03, 2006 at 01:11:46AM +0200, Patrick McHardy wrote: Thomas Zeitlhofer wrote: On Sun, Apr 02, 2006 at 09:19:30PM +0200, Patrick McHardy wrote: Doing the same on 2.6.15.x shows: 1) on tap1: fragmented packets 2) on br0: the defragmented packet (connection tracking) 3