Stanislav Fomichev f2020b27be netfilter: ip6t_REJECT: skip checksum verification for outgoing ipv6 packets ... Don't verify checksum for outgoing packets because checksum calculation may be done by the device. Without this patch: $ ip6tables -I OUTPUT -p tcp --dport 80 -j REJECT --reject-with tcp-reset $ time telnet ipv6.google.com 80 Trying 2a00:1450:4010:c03::67... telnet: Unable to connect to remote host: Connection timed out real 0m7.201s user 0m0.000s sys 0m0.000s With the patch applied: $ ip6tables -I OUTPUT -p tcp --dport 80 -j REJECT --reject-with tcp-reset $ time telnet ipv6.google.com 80 Trying 2a00:1450:4010:c03::67... telnet: Unable to connect to remote host: Connection refused real 0m0.085s user 0m0.000s sys 0m0.000s Signed-off-by: Stanislav Fomichev <stfomichev@yandex-team.ru> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2013-10-23 11:20:00 +02:00
..
netfilter	netfilter: ip6t_REJECT: skip checksum verification for outgoing ipv6 packets	2013-10-23 11:20:00 +02:00
addrconf_core.c	ipv6: move in6_dev_finish_destroy() into core kernel	2013-08-31 22:30:00 -04:00
addrconf.c	ipv6: Fix preferred_lft not updating in some cases	2013-09-30 15:06:19 -04:00
addrlabel.c	ipv6: fix null pointer dereference in __ip6addrlbl_add	2013-09-04 14:14:53 -04:00
af_inet6.c	ipv6: make lookups simpler and faster	2013-10-09 00:01:25 -04:00
ah6.c	ipv6:introduce function to find route for redirect	2013-09-05 12:44:31 -04:00
anycast.c	net: proc: change proc_net_remove to remove_proc_entry	2013-02-18 14:53:08 -05:00
datagram.c	ipv6: make lookups simpler and faster	2013-10-09 00:01:25 -04:00
esp6.c	ipv6:introduce function to find route for redirect	2013-09-05 12:44:31 -04:00
exthdrs_core.c	ipv6: Correct comparisons and calculations using skb->tail and skb-transport_header	2013-05-28 23:49:07 -07:00
exthdrs_offload.c	ipv6: Pull IPv6 GSO registration out of the module	2012-11-15 17:39:24 -05:00
exthdrs.c	ipv6/exthdrs: accept tlv which includes only padding	2013-09-11 15:52:27 -04:00
fib6_rules.c	fib6_rules: fix indentation	2013-09-11 16:16:29 -04:00
icmp.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2013-09-05 14:58:52 -04:00
inet6_connection_sock.c	inet: rename ir_loc_port to ir_num	2013-10-10 14:37:35 -04:00
inet6_hashtables.c	ipv6: make lookups simpler and faster	2013-10-09 00:01:25 -04:00
ip6_checksum.c	ipv6: move csum_ipv6_magic() and udp6_csum_init() into static library	2013-01-08 17:56:10 -08:00
ip6_fib.c	ipv6: compare sernum when walking fib for /proc/net/ipv6_route as safety net	2013-09-27 17:32:17 -04:00
ip6_flowlabel.c	ipv6 flowlabel: add __rcu annotations	2013-03-07 16:33:10 -05:00
ip6_gre.c	ipv6: Fix the upper MTU limit in GRE tunnel	2013-10-08 16:32:40 -04:00
ip6_icmp.c	ipv6: Kill ipv6 dependency of icmpv6_send().	2013-04-29 13:54:36 -04:00
ip6_input.c	net: add SNMP counters tracking incoming ECN bits	2013-08-08 22:24:59 -07:00
ip6_offload.c	ipv6: Add generic UDP Tunnel segmentation	2013-08-31 22:30:01 -04:00
ip6_offload.h	ipv6: Pull IPv6 GSO registration out of the module	2012-11-15 17:39:24 -05:00
ip6_output.c	ipv6: udp packets following an UFO enqueued packet need also be handled by UFO	2013-09-24 11:43:05 -04:00
ip6_tunnel.c	ipv6: Allow the MTU of ipip6 tunnel to be set below 1280	2013-10-07 12:32:26 -04:00
ip6mr.c	tunnels: harmonize cleanup done on skb on rx path	2013-09-04 00:27:26 -04:00
ipcomp6.c	ipv6:introduce function to find route for redirect	2013-09-05 12:44:31 -04:00
ipv6_sockglue.c	ipv6: make lookups simpler and faster	2013-10-09 00:01:25 -04:00
Kconfig	Tunneling: use IP Tunnel stats APIs.	2013-03-26 12:27:19 -04:00
Makefile	net: ipv6: Add IPv6 support to the ping socket.	2013-05-25 21:07:49 -07:00
mcast.c	ipv6 mcast: use in6_dev_put in timer handlers instead of __in6_dev_put	2013-09-30 22:28:58 -07:00
mip6.c	ipv6: Correct comparisons and calculations using skb->tail and skb-transport_header	2013-05-28 23:49:07 -07:00
ndisc.c	ipv6: don't call fib6_run_gc() until routing is ready	2013-09-11 17:04:09 -04:00
netfilter.c	netfilter: add nf_ipv6_ops hook to fix xt_addrtype with IPv6	2013-05-23 11:58:55 +02:00
output_core.c	ipv6: move ip6_local_out into core kernel	2013-08-31 22:30:00 -04:00
ping.c	ipv6: make lookups simpler and faster	2013-10-09 00:01:25 -04:00
proc.c	net: add SNMP counters tracking incoming ECN bits	2013-08-08 22:24:59 -07:00
protocol.c	ipv6: Pull IPv6 GSO registration out of the module	2012-11-15 17:39:24 -05:00
raw.c	ipv6: make lookups simpler and faster	2013-10-09 00:01:25 -04:00
reassembly.c	ipv6: drop packets with multiple fragmentation headers	2013-08-20 00:11:24 -07:00
route.c	ipv6: Not need to set fl6.flowi6_flags as zero	2013-09-30 19:14:11 -04:00
sit.c	sit: allow to use rtnl ops on fb tunnel	2013-10-01 12:55:53 -04:00
syncookies.c	inet: rename ir_loc_port to ir_num	2013-10-10 14:37:35 -04:00
sysctl_net_ipv6.c	net: Convert uses of typedef ctl_table to struct ctl_table	2013-06-13 02:36:09 -07:00
tcp_ipv6.c	inet: rename ir_loc_port to ir_num	2013-10-10 14:37:35 -04:00
tcpv6_offload.c	net: Remove code duplication between offload structures	2012-11-15 17:39:51 -05:00
tunnel6.c	net: ipv6: Standardize prefixes for message logging	2012-05-16 01:01:03 -04:00
udp_impl.h	ipv6: do not clear pinet6 field	2013-05-11 16:26:38 -07:00
udp_offload.c	net: unify skb_udp_tunnel_segment() and skb_udp6_tunnel_segment()	2013-08-31 22:30:01 -04:00
udp.c	ipv6: make lookups simpler and faster	2013-10-09 00:01:25 -04:00
udplite.c	ipv6: do not clear pinet6 field	2013-05-11 16:26:38 -07:00
xfrm6_input.c
xfrm6_mode_beet.c	ipsec: be careful of non existing mac headers	2012-02-23 16:50:45 -05:00
xfrm6_mode_ro.c
xfrm6_mode_transport.c
xfrm6_mode_tunnel.c	xfrm: allow to avoid copying DSCP during encapsulation	2013-03-06 07:02:45 +01:00
xfrm6_output.c	xfrm: revert ipv4 mtu determination to dst_mtu	2013-08-26 12:40:53 +02:00
xfrm6_policy.c	xfrm6: release dev before returning error	2013-05-11 17:40:15 -07:00
xfrm6_state.c	xfrm: make local error reporting more robust	2013-08-14 13:07:12 +02:00
xfrm6_tunnel.c	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00