tree 9c3ec935238bc2850435230b099c12dfc216f1dc
parent 601e68e100b6bf8ba13a32db8faf92d43acaa997
author Masahide NAKAMURA <nakam@linux-ipv6.org> 1171307777 -0800
committer David S. Miller <davem@davemloft.net> 1171307777 -0800

[NETFILTER]: ip6t_mh: drop piggyback payload packet on MH packets

Regarding RFC3775, MH payload proto field should be IPPROTO_NONE. Otherwise
it must be discarded (and the receiver should send ICMP error).

We assume filter should drop such piggyback everytime to disallow slipping
through firewall rules, even the final receiver will discard it.

Signed-off-by: Masahide NAKAMURA <nakam@linux-ipv6.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>