* [PATCH] ipv6: don't let node/interface scoped multicast traffic escape on the wire
@ 2013-02-10 12:33 Hannes Frederic Sowa
2013-02-10 15:31 ` YOSHIFUJI Hideaki
2013-02-11 19:01 ` David Miller
0 siblings, 2 replies; 3+ messages in thread
From: Hannes Frederic Sowa @ 2013-02-10 12:33 UTC (permalink / raw)
To: netdev; +Cc: yoshfuji, erik.hugne
Reported-by: Erik Hugne <erik.hugne@ericsson.com>
Cc: Erik Hugne <erik.hugne@ericsson.com>
Cc: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
---
net/ipv6/ip6_output.c | 7 +++++++
1 file changed, 7 insertions(+)
diff --git a/net/ipv6/ip6_output.c b/net/ipv6/ip6_output.c
index c953825..155eccf 100644
--- a/net/ipv6/ip6_output.c
+++ b/net/ipv6/ip6_output.c
@@ -120,6 +120,13 @@ static int ip6_finish_output2(struct sk_buff *skb)
IP6_UPD_PO_STATS(dev_net(dev), idev, IPSTATS_MIB_OUTMCAST,
skb->len);
+
+ if (IPV6_ADDR_MC_SCOPE(&ipv6_hdr(skb)->daddr) <=
+ IPV6_ADDR_SCOPE_NODELOCAL &&
+ !(dev->flags & IFF_LOOPBACK)) {
+ kfree_skb(skb);
+ return 0;
+ }
}
rcu_read_lock_bh();
--
1.8.1.2
^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [PATCH] ipv6: don't let node/interface scoped multicast traffic escape on the wire
2013-02-10 12:33 [PATCH] ipv6: don't let node/interface scoped multicast traffic escape on the wire Hannes Frederic Sowa
@ 2013-02-10 15:31 ` YOSHIFUJI Hideaki
2013-02-11 19:01 ` David Miller
1 sibling, 0 replies; 3+ messages in thread
From: YOSHIFUJI Hideaki @ 2013-02-10 15:31 UTC (permalink / raw)
To: David Miller; +Cc: netdev, erik.hugne, YOSHIFUJI Hideaki
> Reported-by: Erik Hugne <erik.hugne@ericsson.com>
> Cc: Erik Hugne <erik.hugne@ericsson.com>
> Cc: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
> Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
> ---
> net/ipv6/ip6_output.c | 7 +++++++
> 1 file changed, 7 insertions(+)
>
> diff --git a/net/ipv6/ip6_output.c b/net/ipv6/ip6_output.c
> index c953825..155eccf 100644
> --- a/net/ipv6/ip6_output.c
> +++ b/net/ipv6/ip6_output.c
> @@ -120,6 +120,13 @@ static int ip6_finish_output2(struct sk_buff *skb)
>
> IP6_UPD_PO_STATS(dev_net(dev), idev, IPSTATS_MIB_OUTMCAST,
> skb->len);
> +
> + if (IPV6_ADDR_MC_SCOPE(&ipv6_hdr(skb)->daddr) <=
> + IPV6_ADDR_SCOPE_NODELOCAL &&
> + !(dev->flags & IFF_LOOPBACK)) {
> + kfree_skb(skb);
> + return 0;
> + }
> }
>
> rcu_read_lock_bh();
>
Acked-by: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
--yoshfuji
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [PATCH] ipv6: don't let node/interface scoped multicast traffic escape on the wire
2013-02-10 12:33 [PATCH] ipv6: don't let node/interface scoped multicast traffic escape on the wire Hannes Frederic Sowa
2013-02-10 15:31 ` YOSHIFUJI Hideaki
@ 2013-02-11 19:01 ` David Miller
1 sibling, 0 replies; 3+ messages in thread
From: David Miller @ 2013-02-11 19:01 UTC (permalink / raw)
To: hannes; +Cc: netdev, yoshfuji, erik.hugne
From: Hannes Frederic Sowa <hannes@stressinduktion.org>
Date: Sun, 10 Feb 2013 13:33:35 +0100
> Reported-by: Erik Hugne <erik.hugne@ericsson.com>
> Cc: Erik Hugne <erik.hugne@ericsson.com>
> Cc: YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
> Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Applied.
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2013-02-11 19:01 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2013-02-10 12:33 [PATCH] ipv6: don't let node/interface scoped multicast traffic escape on the wire Hannes Frederic Sowa
2013-02-10 15:31 ` YOSHIFUJI Hideaki
2013-02-11 19:01 ` David Miller
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).