Currently, when forwarding from a Virtual Interface to a Physical
Interface, ip_summed is set to a value of CHECKSUM_UNNECESSARY and
the UDP checksum has not been calculated.

When the packet is then forwarded by a Multicast Router, the checksum
value is left as is and therefore rejected by the receiving
machine(s).

This patch ensures the checksum is recalculated before forwarding.

Signed-off-by: Brendan McGrath <red...@redmandi.dyndns.org>
---

It's a bit ugly putting UDP specific code in this spot - but I'm not
aware of any other protocols that are:
a) multicast;
b) forwarded; and
c) checksummed

 net/ipv6/ip6mr.c | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/net/ipv6/ip6mr.c b/net/ipv6/ip6mr.c
index 890f9bda..ee4370a 100644
--- a/net/ipv6/ip6mr.c
+++ b/net/ipv6/ip6mr.c
@@ -2077,6 +2077,13 @@ static int ip6mr_forward2(struct net *net, struct 
mr6_table *mrt,
        ipv6h = ipv6_hdr(skb);
        ipv6h->hop_limit--;
 
+       if (ipv6h->nexthdr == NEXTHDR_UDP &&
+                                       skb->ip_summed != CHECKSUM_PARTIAL) {
+               struct udphdr *uh = udp_hdr(skb);
+               udp6_set_csum(false, skb, &ipv6_hdr(skb)->saddr,
+                                       &ipv6_hdr(skb)->daddr, ntohs(uh->len));
+       }
+
        IP6CB(skb)->flags |= IP6SKB_FORWARDED;
 
        return NF_HOOK(NFPROTO_IPV6, NF_INET_FORWARD,
-- 
2.7.4

Reply via email to