Re: [PATCH nf-next v3] netfilter: conntrack: skip verification of zero UDP checksum
From: Pablo Neira Ayuso
Date: Mon May 09 2022 - 02:21:08 EST
On Fri, Apr 29, 2022 at 08:40:27PM -0700, Kevin Mitchell wrote:
> The checksum is optional for UDP packets. However nf_reject would
> previously require a valid checksum to elicit a response such as
> ICMP_DEST_UNREACH.
>
> Add some logic to nf_reject_verify_csum to determine if a UDP packet has
> a zero checksum and should therefore not be verified.
Applied.