Julian Anastasov 4e1994ef63 ipvs: do not schedule icmp errors from tunnels ...

[ Upstream commit 0261ea1bd1 ]

We can receive ICMP errors from client or from
tunneling real server. While the former can be
scheduled to real server, the latter should
not be scheduled, they are decapsulated only when
existing connection is found.

Fixes: 6044eeffaf ("ipvs: attempt to schedule icmp packets")
Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Simon Horman <horms@verge.net.au>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

2019-05-16 19:41:23 +02:00

..

ip_vs_app.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next

2018-06-06 18:39:49 -07:00

ip_vs_conn.c

ipvs: don't show negative times in ip_vs_conn

2018-08-16 19:36:57 +02:00

ip_vs_core.c

ipvs: do not schedule icmp errors from tunnels

2019-05-16 19:41:23 +02:00

ip_vs_ctl.c

ipvs: fix warning on unused variable

2019-05-02 09:58:52 +02:00

ip_vs_dh.c

ipvs: fix multiplicative hashing in sh/dh/lblc/lblcr algorithms

2018-04-09 10:15:27 +03:00

ip_vs_est.c

netfilter: ipvs: Convert timers to use timer_setup()

2017-11-08 15:53:58 -08:00

ip_vs_fo.c

ipvs: use correct address family in scheduler logs

2014-09-18 08:59:23 +09:00

ip_vs_ftp.c

ipvs: add ipv6 support to ftp

2018-06-01 14:01:54 +02:00

ip_vs_lblc.c

ipvs: initialize tbl->entries in ip_vs_lblc_init_svc()

2018-04-27 00:20:33 +02:00

ip_vs_lblcr.c

ipvs: initialize tbl->entries after allocation

2018-04-27 00:20:33 +02:00

ip_vs_lc.c

ipvs: use correct address family in scheduler logs

2014-09-18 08:59:23 +09:00

ip_vs_mh.c

treewide: convert ISO_8859-1 text comments to utf-8

2018-08-23 18:48:43 -07:00

ip_vs_nfct.c

ipvs: add full ipv6 support to nfct

2018-06-01 14:01:54 +02:00

ip_vs_nq.c

netfilter: refcounter conversions

2017-03-17 12:49:43 +01:00

ip_vs_ovf.c

ipvs: Add ovf scheduler

2015-08-21 09:08:39 -07:00

ip_vs_pe_sip.c

ipvs: handle connections started by real-servers

2016-04-20 12:34:17 +10:00

ip_vs_pe.c

netfilter: Deletion of unnecessary checks before two function calls

2014-11-20 13:08:43 +01:00

ip_vs_proto_ah_esp.c

ipvs: Pass ipvs into .conn_schedule and ip_vs_try_to_schedule

2015-09-24 09:34:41 +09:00

ip_vs_proto_sctp.c

ipvs: add assured state for conn templates

2018-07-18 11:26:40 +02:00

ip_vs_proto_tcp.c

ipvs: add assured state for conn templates

2018-07-18 11:26:40 +02:00

ip_vs_proto_udp.c

ipvs: add assured state for conn templates

2018-07-18 11:26:40 +02:00

ip_vs_proto.c

ipvs: add assured state for conn templates

2018-07-18 11:26:40 +02:00

ip_vs_rr.c

netfilter: refcounter conversions

2017-03-17 12:49:43 +01:00

ip_vs_sched.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next

2015-08-04 23:57:45 -07:00

ip_vs_sed.c

netfilter: refcounter conversions

2017-03-17 12:49:43 +01:00

ip_vs_sh.c

ipvs: fix multiplicative hashing in sh/dh/lblc/lblcr algorithms

2018-04-09 10:15:27 +03:00

ip_vs_sync.c

ipvs: add assured state for conn templates

2018-07-18 11:26:40 +02:00

ip_vs_wlc.c

netfilter: refcounter conversions

2017-03-17 12:49:43 +01:00

ip_vs_wrr.c

netfilter: refcounter conversions

2017-03-17 12:49:43 +01:00

ip_vs_xmit.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf

2018-06-11 14:24:32 -07:00

Kconfig

ipvs: fix dependency on nf_defrag_ipv6

2019-03-23 20:09:45 +01:00

Makefile

netfilter: ipvs: Add configurations of Maglev hashing

2018-04-09 10:11:18 +03:00