diff options
| author | Kevin Krakauer <krakauer@google.com> | 2020-01-27 12:30:06 -0800 |
|---|---|---|
| committer | Kevin Krakauer <krakauer@google.com> | 2020-01-27 12:30:06 -0800 |
| commit | e889f95671a9b7b1c6f65cb6fbc1b865a896e827 (patch) | |
| tree | 7c73d21ba8b665b667a44bf09b274812d87e6317 /pkg/tcpip/iptables | |
| parent | 29316e66adfc49c158425554761e34c12338f1d9 (diff) | |
More cleanup.
Diffstat (limited to 'pkg/tcpip/iptables')
| -rw-r--r-- | pkg/tcpip/iptables/udp_matcher.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/pkg/tcpip/iptables/udp_matcher.go b/pkg/tcpip/iptables/udp_matcher.go index f59ca2027..3bb076f9c 100644 --- a/pkg/tcpip/iptables/udp_matcher.go +++ b/pkg/tcpip/iptables/udp_matcher.go @@ -73,9 +73,9 @@ func (um *UDPMatcher) Match(hook Hook, pkt tcpip.PacketBuffer, interfaceName str // We dont't match fragments. if frag := netHeader.FragmentOffset(); frag != 0 { if frag == 1 { + log.Warningf("Dropping UDP packet: malicious fragmented packet.") return false, true } - log.Warningf("Dropping UDP packet: malicious fragmented packet.") return false, false } |