From 568635c2e142004cd6cb7a4a55618e96fc823288 Mon Sep 17 00:00:00 2001 From: Alexander Gozman Date: Tue, 7 Apr 2015 17:04:52 +0300 Subject: [PATCH] Reject ICMP traffic, not only TCP/UDP --- src/respond-reject.c | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/src/respond-reject.c b/src/respond-reject.c index 42aabbaa81..ea756d7e72 100644 --- a/src/respond-reject.c +++ b/src/respond-reject.c @@ -70,18 +70,14 @@ TmEcode RespondRejectFunc(ThreadVars *tv, Packet *p, void *data, PacketQueue *pq if (PKT_IS_IPV4(p)) { if (PKT_IS_TCP(p)) { ret = RejectSendIPv4TCP(tv, p, data); - } else if(PKT_IS_UDP(p)) { - ret = RejectSendIPv4ICMP(tv, p, data); } else { - return TM_ECODE_OK; + ret = RejectSendIPv4ICMP(tv, p, data); } } else if (PKT_IS_IPV6(p)) { if (PKT_IS_TCP(p)) { ret = RejectSendIPv6TCP(tv, p, data); - } else if(PKT_IS_UDP(p)){ - ret = RejectSendIPv6ICMP(tv, p, data); } else { - return TM_ECODE_OK; + ret = RejectSendIPv6ICMP(tv, p, data); } } else { /* we're only supporting IPv4 and IPv6 */