]> www.infradead.org Git - users/jedix/linux-maple.git/commit
ixgbe: add flow control ethertype to the anti-spoofing filter
authorEmil Tantilov <emil.s.tantilov@intel.com>
Thu, 20 Aug 2015 22:31:20 +0000 (15:31 -0700)
committerChuck Anderson <chuck.anderson@oracle.com>
Wed, 6 Jul 2016 23:39:01 +0000 (16:39 -0700)
commit1c2edf4ed14001b501fe64295ce395002bbe4b82
tree47e6dd311f43f7903a590b032da7c796d321ca0a
parent43d7040953c9279e44fcd6408e69f7271d53dafa
ixgbe: add flow control ethertype to the anti-spoofing filter

Orabug: 23177316

This patch makes sure that flow control packets initiated by the VF are
dropped and reported as spoofed.

Flow control packets can be used to limit the throughput or as DOS
attack when generated from a VF. Flow control is not supported per VF
hence any pause frames generated from a VF are considered malicious.

Also cleaned up indentation and some redundant comments.

Signed-off-by: Emil Tantilov <emil.s.tantilov@intel.com>
Tested-by: Krishneil Singh <krishneil.k.singh@intel.com>
Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>
(cherry picked from commit f079fa005aae08ee0e1bc32699874ff4f02e11c1)
Signed-off-by: Brian Maly <brian.maly@oracle.com>
drivers/net/ethernet/intel/ixgbe/ixgbe_main.c
drivers/net/ethernet/intel/ixgbe/ixgbe_type.h