Re: [RFC PATCH] netfilter: nf_tables: add new write expression

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 15. Februar 2014 13:36:13 GMT+00:00, Florian Westphal <fw@xxxxxxxxx> wrote:
>Nikolay Aleksandrov <nikolay@xxxxxxxxxx> wrote:
>> The new "write" expression can be used to manipulate packet data.
>
>Thanks.  This is very useful feature (needed also for TCPMSS mangling
>for instance).
>
>General question: How are/should packet checksums be handled after
>packet
>content was altered?

Good question indeed. I guess we need to make this dependant on the payload base and protocols involved. LuckIly in most cases we can rely on checksum offload to take care of this.

Maybe we can have userspace specify the necessary parameters such as the checksum position and whether a pseudo header is used.

--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html




[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux