Skip to content

nat46-core: Drop packet with non-IPv4-translatable IPv6 address #10

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
srsmiraato wants to merge 1 commit into
base: master
Choose a base branch
from
Open

nat46-core: Drop packet with non-IPv4-translatable IPv6 address #10

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 5 additions & 3 deletions nat46/modules/nat46-core.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -1473,9 +1473,11 @@ int pairs_xlate_v6_to_v4_outer(nat46_instance_t *nat46, struct ipv6hdr *ip6h, ui
if (xlate_dst >= 0) {
if (xlate_src < 0) {
if(proto == NEXTHDR_ICMP) {
nat46debug(1, "[nat46] Could not translate remote address v6->v4, ipair %d, for ICMP6 use dest addr", ipair);
*pv4saddr = *pv4daddr;
xlate_src = xlate_dst;
/* RFC6145 Section 5.2 discussed about non-IPv4-translatable IPv6 addresses on the IPv6 headers,
* and left the solution for stateless translation as future work.
* RFC6791 has recommendations for this issue, but until that's implemented, silently drop this packet
*/
nat46debug(1, "[nat46] Could not translate remote address v6->v4, ipair %d, for ICMP6 drop this packet", ipair);
} else {
nat46debug(5, "[nat46] Could not translate remote address v6->v4, ipair %d", ipair);
}
Expand Down