patch-2.0.1 linux/net/ipv4/ip_fw.c

Next file: linux/net/ipv4/ip_masq_app.c
Previous file: linux/net/ipv4/ip_forward.c
Back to the patch index
Back to the overall index

diff -u --recursive --new-file v2.0.0/linux/net/ipv4/ip_fw.c linux/net/ipv4/ip_fw.c
@@ -264,9 +264,11 @@
 	
 	/*
 	 *	Too short.
+	 *
+	 *	But only too short for a packet with ports...
 	 */
 	 
-	else if(ntohs(ip->tot_len)<8+(ip->ihl<<2))
+	else if((ntohs(ip->tot_len)<8+(ip->ihl<<2))&&(ip->protocol==IPPROTO_TCP || ip->protocol==IPPROTO_UDP))
 		return FW_BLOCK;
 		
 	src = ip->saddr;

FUNET's LINUX-ADM group, linux-adm@nic.funet.fi
TCL-scripts by Sam Shen, slshen@lbl.gov