On Fri, Apr 29, 2022 at 08:40:27PM -0700, Kevin Mitchell wrote: > The checksum is optional for UDP packets. However nf_reject would > previously require a valid checksum to elicit a response such as > ICMP_DEST_UNREACH. > > Add some logic to nf_reject_verify_csum to determine if a UDP packet has > a zero checksum and should therefore not be verified. Applied.
