Re: [PATCH net-next v2] netfilter: ipv6: nf_defrag: Pass on packets to stack per RFC2460

2018-01-15 Thread Pablo Neira Ayuso
On Fri, Jan 12, 2018 at 05:36:27PM -0700, Subash Abhinov Kasiviswanathan wrote: > ipv6_defrag pulls network headers before fragment header. In case of > an error, the netfilter layer is currently dropping these packets. > This results in failure of some IPv6 standards tests which passed on > older

[PATCH net-next v2] netfilter: ipv6: nf_defrag: Pass on packets to stack per RFC2460

2018-01-12 Thread Subash Abhinov Kasiviswanathan
ipv6_defrag pulls network headers before fragment header. In case of an error, the netfilter layer is currently dropping these packets. This results in failure of some IPv6 standards tests which passed on older kernels due to the netfilter framework using cloning. The test case run here is a