davidlt/kernel-ark
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
a09113c2c8
kernel-ark/net/ipv4/netfilter
History
Patrick McHardy a09113c2c8 [NETFILTER]: tcp conntrack: do liberal tracking for picked up connections 
Do liberal tracking (only RSTs need to be in-window) for connections picked
up without seeing a SYN to deal with window scaling. Also change logging
of invalid packets not to log packets accepted by liberal tracking to avoid
spamming the logs.

Based on suggestion from James Ralston <ralston@pobox.com>

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-02-08 12:39:10 -08:00
..
arp_tables.c [NETFILTER]: {ip,ip6,arp}_tables: fix exponential worst-case search for loops 2006-12-13 16:48:23 -08:00
arpt_mangle.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
arptable_filter.c [NETFILTER]: x_tables: remove unused argument to target functions 2006-09-22 14:55:33 -07:00
ip_conntrack_amanda.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_conntrack_core.c [PATCH] slab: remove kmem_cache_t 2006-12-07 08:39:25 -08:00
ip_conntrack_ftp.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_conntrack_helper_h323.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_conntrack_helper_pptp.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_conntrack_irc.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_conntrack_netbios_ns.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_netlink.c [NETFILTER]: ctnetlink: fix compile failure with NF_CONNTRACK_MARK=n 2007-02-02 19:33:11 -08:00
ip_conntrack_proto_generic.c [NETFILTER]: Change tunables to __read_mostly 2006-09-22 15:18:54 -07:00
ip_conntrack_proto_gre.c [NETFILTER]: remove remaining ASSERT_{READ,WRITE}_LOCK 2006-12-02 21:31:33 -08:00
ip_conntrack_proto_icmp.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_proto_sctp.c [NETFILTER]: conntrack annotations 2006-09-28 18:03:00 -07:00
ip_conntrack_proto_tcp.c [NETFILTER]: tcp conntrack: do liberal tracking for picked up connections 2007-02-08 12:39:10 -08:00
ip_conntrack_proto_udp.c [NETFILTER]: Change tunables to __read_mostly 2006-09-22 15:18:54 -07:00
ip_conntrack_sip.c [NETFILTER]: SIP conntrack: fix out of bounds memory access 2007-01-30 14:25:24 -08:00
ip_conntrack_standalone.c [NETFILTER]: remove remaining ASSERT_{READ,WRITE}_LOCK 2006-12-02 21:31:33 -08:00
ip_conntrack_tftp.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_nat_amanda.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_nat_core.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ip_nat_ftp.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_nat_helper_h323.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_nat_helper_pptp.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_nat_helper.c [TCP]: remove tcp header from tcp_v4_check (take #2) 2007-02-08 12:38:44 -08:00
ip_nat_irc.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_nat_proto_gre.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ip_nat_proto_icmp.c [NETFILTER]: nf_conntrack: endian annotations 2006-12-02 22:05:08 -08:00
ip_nat_proto_tcp.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ip_nat_proto_udp.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ip_nat_proto_unknown.c
ip_nat_rule.c [NETFILTER]: NAT annotations 2006-09-28 18:03:01 -07:00
ip_nat_sip.c [NETFILTER]: sip conntrack: better NAT handling 2006-12-02 21:31:26 -08:00
ip_nat_snmp_basic.c [NETFILTER]: ip_nat_snmp_basic annotations. 2006-12-02 21:27:17 -08:00
ip_nat_standalone.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
ip_nat_tftp.c [NETFILTER]: ip_conntrack: fix NAT helper unload races 2006-12-02 21:31:22 -08:00
ip_queue.c [NET]: Turn nfmark into generic mark 2006-12-02 21:21:38 -08:00
ip_tables.c [NETFILTER]: compat offsets size change 2007-01-04 12:14:41 -08:00
ipt_addrtype.c [IPV4]: inet_addr_type() annotations 2006-09-28 18:01:07 -07:00
ipt_ah.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
ipt_CLUSTERIP.c [NETFILTER]: x_tables: add missing try to load conntrack from match/targets 2006-12-13 16:48:21 -08:00
ipt_ecn.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
ipt_ECN.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ipt_iprange.c
ipt_LOG.c [NETFILTER]: x_tables: add NFLOG target 2006-12-02 21:31:31 -08:00
ipt_MASQUERADE.c [NETFILTER]: nf_nat: fix MASQUERADE crash on device down 2007-01-04 12:16:54 -08:00
ipt_NETMAP.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
ipt_owner.c [NETFILTER]: x_tables: remove unused size argument to check/destroy functions 2006-09-22 14:55:34 -07:00
ipt_recent.c [PATCH] struct path: convert netfilter 2006-12-08 08:28:48 -08:00
ipt_REDIRECT.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
ipt_REJECT.c [TCP]: remove tcp header from tcp_v4_check (take #2) 2007-02-08 12:38:44 -08:00
ipt_SAME.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
ipt_TCPMSS.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ipt_tos.c
ipt_TOS.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ipt_ttl.c
ipt_TTL.c [NET]: netfilter checksum annotations 2006-12-02 21:23:42 -08:00
ipt_ULOG.c [NET]: Turn nfmark into generic mark 2006-12-02 21:21:38 -08:00
iptable_filter.c [NETFILTER]: x_tables: remove unused argument to target functions 2006-09-22 14:55:33 -07:00
iptable_mangle.c [NET]: Rethink mark field in struct flowi 2006-12-02 21:21:39 -08:00
iptable_raw.c [NETFILTER]: x_tables: remove unused argument to target functions 2006-09-22 14:55:33 -07:00
Kconfig [NETFILTER]: New connection tracking is not EXPERIMENTAL anymore 2007-01-04 12:16:06 -08:00
Makefile [NETFILTER]: nf_nat: fix ICMP translation with statically linked conntrack 2007-01-26 01:06:47 -08:00
nf_conntrack_l3proto_ipv4_compat.c [NETFILTER]: nf_conntrack: /proc compatibility with old connection tracking 2006-12-02 21:31:20 -08:00
nf_conntrack_l3proto_ipv4.c [NETFILTER]: nf_conntrack: EXPORT_SYMBOL cleanup 2006-12-02 22:11:25 -08:00
nf_conntrack_proto_icmp.c [NETFILTER]: nf_conntrack: EXPORT_SYMBOL cleanup 2006-12-02 22:11:25 -08:00
nf_nat_amanda.c [NETFILTER]: nf_conntrack/nf_nat: add amanda helper port 2006-12-02 22:08:26 -08:00
nf_nat_core.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
nf_nat_ftp.c [NETFILTER]: nf_nat: add FTP NAT helper port 2006-12-02 22:07:44 -08:00
nf_nat_h323.c [NETFILTER]: nf_conntrack/nf_nat: add H.323 helper port 2006-12-02 22:08:46 -08:00
nf_nat_helper.c [TCP]: remove tcp header from tcp_v4_check (take #2) 2007-02-08 12:38:44 -08:00
nf_nat_irc.c [NETFILTER]: nf_conntrack/nf_nat: add IRC helper port 2006-12-02 22:09:06 -08:00
nf_nat_pptp.c [NETFILTER]: nf_nat_pptp: fix expectation removal 2007-01-26 01:07:30 -08:00
nf_nat_proto_gre.c [NETFILTER]: nf_conntrack/nf_nat: add PPTP helper port 2006-12-02 22:09:41 -08:00
nf_nat_proto_icmp.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
nf_nat_proto_tcp.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
nf_nat_proto_udp.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
nf_nat_proto_unknown.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
nf_nat_rule.c [NETFILTER]: Add NAT support for nf_conntrack 2006-12-02 22:07:13 -08:00
nf_nat_sip.c [NETFILTER]: nf_conntrack/nf_nat: add SIP helper port 2006-12-02 22:09:57 -08:00
nf_nat_snmp_basic.c [NETFILTER]: nf_nat: add SNMP NAT helper port 2006-12-02 22:10:34 -08:00
nf_nat_standalone.c [NETFILTER]: nf_nat: fix hanging connections when loading the NAT module 2007-01-09 14:33:49 -08:00
nf_nat_tftp.c [NETFILTER]: nf_conntrack/nf_nat: add TFTP helper port 2006-12-02 22:10:18 -08:00