Re: [PATCH net-next,v2] ipv6: Add rate limit mask for ICMPv6 messages

2019-04-17 Thread Stephen Suryaputra
On Wed, Apr 17, 2019 at 10:46:47AM -0700, David Miller wrote: > From: Stephen Suryaputra > Date: Mon, 15 Apr 2019 20:31:57 -0400 > > > @@ -850,6 +850,14 @@ static int __net_init inet6_net_init(struct net *net) > > net->ipv6.sysctl.icmpv6_echo_ignore_all = 0; > > net->ipv6.sysctl.icmpv6_ec

Re: [PATCH net-next,v2] ipv6: Add rate limit mask for ICMPv6 messages

2019-04-17 Thread David Miller
From: Stephen Suryaputra Date: Mon, 15 Apr 2019 20:31:57 -0400 > @@ -850,6 +850,14 @@ static int __net_init inet6_net_init(struct net *net) > net->ipv6.sysctl.icmpv6_echo_ignore_all = 0; > net->ipv6.sysctl.icmpv6_echo_ignore_multicast = 0; > net->ipv6.sysctl.icmpv6_echo_ignore_a

[PATCH net-next,v2] ipv6: Add rate limit mask for ICMPv6 messages

2019-04-15 Thread Stephen Suryaputra
To make ICMPv6 closer to ICMPv4, add ratemask parameter. Since the ICMP message types use larger numeric values, a simple bitmask doesn't fit. I use large bitmap. The input and output are the in form of list of ranges. Set the default to rate limit all error messages but Packet Too Big. For Packet