summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPatrick McHardy <kaber@trash.net>2007-08-14 13:14:58 -0700
committerDavid S. Miller <davem@davemloft.net>2007-08-14 13:14:58 -0700
commit45241a7a07537266eec363593ef377a1e6b7db7f (patch)
treed7f467775f6406764d547bd01c3f513f09557bd6
parentaa584eda5d2002097de9f608b362d9150730abd7 (diff)
downloadkernel-crypto-45241a7a07537266eec363593ef377a1e6b7db7f.tar.gz
kernel-crypto-45241a7a07537266eec363593ef377a1e6b7db7f.tar.xz
kernel-crypto-45241a7a07537266eec363593ef377a1e6b7db7f.zip
[NETFILTER]: nf_nat_sip: don't drop short packets
Don't drop packets shorter than "SIP/2.0", just ignore them. Keep-alives can validly be shorter for example. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
-rw-r--r--net/ipv4/netfilter/nf_nat_sip.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/ipv4/netfilter/nf_nat_sip.c b/net/ipv4/netfilter/nf_nat_sip.c
index a889ec3ec83..e14d41976c2 100644
--- a/net/ipv4/netfilter/nf_nat_sip.c
+++ b/net/ipv4/netfilter/nf_nat_sip.c
@@ -104,7 +104,7 @@ static unsigned int ip_nat_sip(struct sk_buff **pskb,
dataoff = ip_hdrlen(*pskb) + sizeof(struct udphdr);
datalen = (*pskb)->len - dataoff;
if (datalen < sizeof("SIP/2.0") - 1)
- return NF_DROP;
+ return NF_ACCEPT;
addr_map_init(ct, &map);