aboutsummaryrefslogtreecommitdiff
path: root/sys/netgraph
diff options
context:
space:
mode:
authorMark Johnston <markj@FreeBSD.org>2020-01-23 16:45:48 +0000
committerMark Johnston <markj@FreeBSD.org>2020-01-23 16:45:48 +0000
commit66351f5126ac27d55d0014568ee9b5319e46c01b (patch)
treed7a79e9fc54d58d77f262e3e72f1bda43150cd0a /sys/netgraph
parente6bd3a812d8f905291fa3965d4532a03e84f55a5 (diff)
downloadsrc-66351f5126ac27d55d0014568ee9b5319e46c01b.tar.gz
src-66351f5126ac27d55d0014568ee9b5319e46c01b.zip
ng_nat: Pass IPv6 packets through.
ng_nat implements NAT for IPv4 traffic only. When connected to an ng_ether node it erroneously handled IPv6 packets as well. This change is not sufficient: ng_nat does not do any validation of IP packets in this mode, even though they have not yet passed through ip_input(). PR: 243096 Reported by: Robert James Hernandez <rob@sarcasticadmin.com> Reviewed by: julian Differential Revision: https://reviews.freebsd.org/D23080
Notes
Notes: svn path=/head/; revision=357053
Diffstat (limited to 'sys/netgraph')
-rw-r--r--sys/netgraph/ng_nat.c1
1 files changed, 0 insertions, 1 deletions
diff --git a/sys/netgraph/ng_nat.c b/sys/netgraph/ng_nat.c
index 7111881b50e6..f0784f43ddb8 100644
--- a/sys/netgraph/ng_nat.c
+++ b/sys/netgraph/ng_nat.c
@@ -795,7 +795,6 @@ ng_nat_rcvdata(hook_p hook, item_p item )
eh = mtod(m, struct ether_header *);
switch (ntohs(eh->ether_type)) {
case ETHERTYPE_IP:
- case ETHERTYPE_IPV6:
ipofs = sizeof(struct ether_header);
break;
default: