Commit 45241a7a authored by Patrick McHardy's avatar Patrick McHardy Committed by David S. Miller
Browse files

[NETFILTER]: nf_nat_sip: don't drop short packets

Don't drop packets shorter than "SIP/2.0", just ignore them. Keep-alives
can validly be shorter for example.
Signed-off-by: default avatarPatrick McHardy <>
Signed-off-by: default avatarDavid S. Miller <>
parent aa584eda
...@@ -104,7 +104,7 @@ static unsigned int ip_nat_sip(struct sk_buff **pskb, ...@@ -104,7 +104,7 @@ static unsigned int ip_nat_sip(struct sk_buff **pskb,
dataoff = ip_hdrlen(*pskb) + sizeof(struct udphdr); dataoff = ip_hdrlen(*pskb) + sizeof(struct udphdr);
datalen = (*pskb)->len - dataoff; datalen = (*pskb)->len - dataoff;
if (datalen < sizeof("SIP/2.0") - 1) if (datalen < sizeof("SIP/2.0") - 1)
return NF_DROP; return NF_ACCEPT;
addr_map_init(ct, &map); addr_map_init(ct, &map);
Supports Markdown
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment