tree c4d47349e2c17b4804564defaa2d31a34a0cef8a
parent 3a1de1acf46a9b56fee28e917577d3260d49ccb9
author Julian Anastasov <ja@ssi.bg> 1554027892 +0300
committer Greg Kroah-Hartman <gregkh@linuxfoundation.org> 1558028622 +0200

ipvs: do not schedule icmp errors from tunnels

[ Upstream commit 0261ea1bd1eb0da5c0792a9119b8655cf33c80a3 ]

We can receive ICMP errors from client or from
tunneling real server. While the former can be
scheduled to real server, the latter should
not be scheduled, they are decapsulated only when
existing connection is found.

Fixes: 6044eeffafbe ("ipvs: attempt to schedule icmp packets")
Signed-off-by: Julian Anastasov <ja@ssi.bg>
Signed-off-by: Simon Horman <horms@verge.net.au>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>