]> git.karo-electronics.de Git - linux-beck.git/commit
ixgbe: add flow control ethertype to the anti-spoofing filter
authorEmil Tantilov <emil.s.tantilov@intel.com>
Thu, 20 Aug 2015 22:31:20 +0000 (15:31 -0700)
committerJeff Kirsher <jeffrey.t.kirsher@intel.com>
Wed, 14 Oct 2015 06:46:49 +0000 (23:46 -0700)
commitf079fa005aae08ee0e1bc32699874ff4f02e11c1
tree4eae77386f462f456cf43a70951c17bffd482b57
parent06a24dd6c29a814a81595861c2cc681329c56bfc
ixgbe: add flow control ethertype to the anti-spoofing filter

This patch makes sure that flow control packets initiated by the VF are
dropped and reported as spoofed.

Flow control packets can be used to limit the throughput or as DOS
attack when generated from a VF. Flow control is not supported per VF
hence any pause frames generated from a VF are considered malicious.

Also cleaned up indentation and some redundant comments.

Signed-off-by: Emil Tantilov <emil.s.tantilov@intel.com>
Tested-by: Krishneil Singh <krishneil.k.singh@intel.com>
Signed-off-by: Jeff Kirsher <jeffrey.t.kirsher@intel.com>
drivers/net/ethernet/intel/ixgbe/ixgbe_main.c
drivers/net/ethernet/intel/ixgbe/ixgbe_type.h