[Intel-wired-lan] [PATCH] ixgbe: add flow control ethertype to the anti-spoofing filter
Singh, Krishneil K
krishneil.k.singh at intel.com
Wed Sep 9 19:43:53 UTC 2015
From: Intel-wired-lan [mailto:intel-wired-lan-bounces at lists.osuosl.org] On Behalf Of Emil Tantilov
Sent: Thursday, August 20, 2015 3:31 PM
To: intel-wired-lan at lists.osuosl.org
Subject: [Intel-wired-lan] [PATCH] ixgbe: add flow control ethertype to the anti-spoofing filter
This patch makes sure that flow control packets initiated by the VF are dropped and reported as spoofed.
Flow control packets can be used to limit the throughput or as DOS attack when generated from a VF. Flow control is not supported per VF hence any pause frames generated from a VF are considered malicious.
Also cleaned up indentation and some redundant comments.
Signed-off-by: Emil Tantilov <emil.s.tantilov at intel.com>
drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 16 +++++++++++-----
drivers/net/ethernet/intel/ixgbe/ixgbe_type.h | 4 ++++
2 files changed, 15 insertions(+), 5 deletions(-)
Tested-by: Krishneil Singh <krishneil.k.singh at intel.com>
Intel-wired-lan mailing list
Intel-wired-lan at lists.osuosl.org
More information about the Intel-wired-lan