lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Mon, 07 Apr 2014 20:06:38 -0400 (EDT) From: David Miller <davem@...emloft.net> To: lorenzo@...gle.com Cc: netdev@...r.kernel.org, ja@....bg, hannes@...essinduktion.org Subject: Re: [PATCH v3] net: add a sysctl to reflect the fwmark on replies From: Lorenzo Colitti <lorenzo@...gle.com> Date: Tue, 8 Apr 2014 08:58:51 +0900 > Kernel-originated IP packets that have no user socket associated > with them (e.g., ICMP errors and echo replies, TCP RSTs, etc.) > are emitted with a mark of zero. Add a sysctl to make them have > the same mark as the packet they are replying to. > > This allows an administrator that wishes to do so to use > mark-based routing, firewalling, etc. for these replies by > marking the original packets inbound. > > Tested using user-mode linux: > - ICMP/ICMPv6 echo replies and errors. > - TCP RST packets (IPv4 and IPv6). > > Signed-off-by: Lorenzo Colitti <lorenzo@...gle.com> This is a new feature, which should be targetted at net-next, which is closed at this time. Please resubmit this when the net-next tree opens back up, and properly tag your subject line with "net-next" so that it is clear what tree your change is targetted at. Thanks. -- To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to majordomo@...r.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html
Powered by blists - more mailing lists