1. 28 10月, 2013 3 次提交
  2. 23 10月, 2013 1 次提交
    • S
      netfilter: ip6t_REJECT: skip checksum verification for outgoing ipv6 packets · f2020b27
      Stanislav Fomichev 提交于
      Don't verify checksum for outgoing packets because checksum calculation
      may be done by the device.
      
      Without this patch:
      $ ip6tables -I OUTPUT -p tcp --dport 80 -j REJECT --reject-with tcp-reset
      $ time telnet ipv6.google.com 80
      Trying 2a00:1450:4010:c03::67...
      telnet: Unable to connect to remote host: Connection timed out
      
      real    0m7.201s
      user    0m0.000s
      sys     0m0.000s
      
      With the patch applied:
      $ ip6tables -I OUTPUT -p tcp --dport 80 -j REJECT --reject-with tcp-reset
      $ time telnet ipv6.google.com 80
      Trying 2a00:1450:4010:c03::67...
      telnet: Unable to connect to remote host: Connection refused
      
      real    0m0.085s
      user    0m0.000s
      sys     0m0.000s
      Signed-off-by: NStanislav Fomichev <stfomichev@yandex-team.ru>
      Signed-off-by: NPablo Neira Ayuso <pablo@netfilter.org>
      f2020b27
  3. 22 10月, 2013 2 次提交
  4. 17 10月, 2013 7 次提交
  5. 15 10月, 2013 3 次提交
  6. 11 10月, 2013 2 次提交
  7. 10 10月, 2013 22 次提交