Re: [PATCH v3 -next] ip: reject too-big defragmented DF-skb when forwarding

2015-05-24 Thread David Miller
From: Florian Westphal Date: Fri, 22 May 2015 00:06:40 +0200 > Send icmp pmtu error if we find that the largest fragment of df-skb > exceeded the output path mtu. > > The ip output path will still catch this later on but we can avoid the > forward/postrouting hook traversal by rejecting right aw

[PATCH v3 -next] ip: reject too-big defragmented DF-skb when forwarding

2015-05-21 Thread Florian Westphal
Send icmp pmtu error if we find that the largest fragment of df-skb exceeded the output path mtu. The ip output path will still catch this later on but we can avoid the forward/postrouting hook traversal by rejecting right away. This is what ipv6 already does. Acked-by: Hannes Frederic Sowa Sig