Commit de384830 authored by Stephen Hemminger's avatar Stephen Hemminger Committed by David S. Miller

net: ingress filter message limit

If user misconfigures ingress and causes a redirection loop, don't
overwhelm the log.  This is also a error case so make it unlikely.
Found by inspection, luckily not in real system.
Signed-off-by: default avatarStephen Hemminger <shemminger@vyatta.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent e2e0c7c9
...@@ -2646,10 +2646,10 @@ static int ing_filter(struct sk_buff *skb) ...@@ -2646,10 +2646,10 @@ static int ing_filter(struct sk_buff *skb)
int result = TC_ACT_OK; int result = TC_ACT_OK;
struct Qdisc *q; struct Qdisc *q;
if (MAX_RED_LOOP < ttl++) { if (unlikely(MAX_RED_LOOP < ttl++)) {
printk(KERN_WARNING if (net_ratelimit())
"Redir loop detected Dropping packet (%d->%d)\n", pr_warning( "Redir loop detected Dropping packet (%d->%d)\n",
skb->skb_iif, dev->ifindex); skb->skb_iif, dev->ifindex);
return TC_ACT_SHOT; return TC_ACT_SHOT;
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment