shichunmaandAlan C. Assis 9aa6eb5671 net/ipfilter: Reassemble IPv6 fragments before filtering ...

IPv6 input currently lets fragmented packets continue into the IP filter path before reassembly. Forwarded IP filter rules can inspect L4 fields, but non-first IPv6 fragments do not carry the transport header.

Consume IPv6 fragments through the existing reassembly/drop helper before NAT66 or IP filter processing. This keeps plain IPv6 forwarding unchanged when neither L4-dependent feature is enabled, while avoiding filtering incomplete fragments.

Signed-off-by: shichunma <shichunma@bestechnic.com>

2026-08-01 17:40:07 -03:00

..

CMakeLists.txt

…

devif_callback.c

…

devif_filesend.c

…

devif_forward.c

…

devif_iobsend.c

…

devif_loopback.c

…

devif_poll.c

…

devif_send.c

…

devif.h

…

ipv4_input.c

…

ipv6_input.c

net/ipfilter: Reassemble IPv6 fragments before filtering

2026-08-01 17:40:07 -03:00

Make.defs

…