On 23.07.2010 08:38, Changli Gao wrote: > On Fri, Jul 23, 2010 at 2:16 PM, Jan Engelhardt <jengelh@xxxxxxxxxx> wrote: >> >> >> I wonder how this fares with trailing padding or data, like, when >> you have a standard v4/v6 packet created in a raw socket, and append >> a bunch of \0s to it. >> >> > > For the packets received, ip_rcv, ipv6_rcv and bridge all call > pskb_trim_rcsum before feeding them to netfilter. The raw packets are > sent via dev_queue_xmit(), and they don't pass through the output path > of netfilter. That's not true, raw packets also pass through netfilter. However I agree that this patch makes sense to properly deal with jumbo frames, but you should also update xt_length for consistency. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html