28 Aug, 2013

1 commit

• 41d73ec05   netfilter: nf_conntrack: make sequence number adjustments usuable without NAT ... Browse Code »

  Split out sequence number adjustments from NAT and move them to the conntrack
  core to make them usable for SYN proxying. The sequence number adjustment
  information is moved to a seperate extend. The extend is added to new
  conntracks when a NAT mapping is set up for a connection using a helper.

  As a side effect, this saves 24 bytes per connection with NAT in the common
  case that a connection does not have a helper assigned.

  Signed-off-by: Patrick McHardy
  Tested-by: Martin Topholm
  Signed-off-by: Jesper Dangaard Brouer
  Signed-off-by: Pablo Neira Ayuso

  Patrick McHardy

  2013-08-28 06:26:48 +0800  

13 Aug, 2013

1 commit

• bd0779370   netfilter: nfnetlink_queue: allow to attach expectations to conntracks ... Browse Code »

  This patch adds the capability to attach expectations via nfnetlink_queue.
  This is required by conntrack helpers that trigger expectations based on
  the first packet seen like the TFTP and the DHCPv6 user-space helpers.

  Signed-off-by: Pablo Neira Ayuso

  Pablo Neira Ayuso

  2013-08-13 22:32:10 +0800  

23 Jun, 2012

1 commit

• ab5e8b77d   netfilter: nfnetlink_queue: fix sparse warning due to missing include ... Browse Code »

  This patch fixes a sparse warning due to missing include header file.

  Signed-off-by: Pablo Neira Ayuso

  Pablo Neira Ayuso

  2012-06-23 08:13:38 +0800  

22 Jun, 2012

1 commit

• d584a61a9   netfilter: nfnetlink_queue: fix compilation with CONFIG_NF_NAT=m and CONFIG_NF_CT_NETLINK=y ... Browse Code »

  LD init/built-in.o
  net/built-in.o:(.data+0x4408): undefined reference to `nf_nat_tcp_seq_adjust'
  make: *** [vmlinux] Error 1

  This patch adds a new pointer hook (nfq_ct_nat_hook) similar to other existing
  in Netfilter to solve our complicated configuration dependencies.

  Reported-by: Valdis Kletnieks
  Signed-off-by: Pablo Neira Ayuso

  Pablo Neira Ayuso

  2012-06-22 08:49:52 +0800  

19 Jun, 2012

1 commit

• 7c6223454   netfilter: nfnetlink_queue: fix compilation with NF_CONNTRACK disabled ... Browse Code »

  In "9cb0176 netfilter: add glue code to integrate nfnetlink_queue and ctnetlink"
  the compilation with NF_CONNTRACK disabled is broken. This patch fixes this
  issue.

  I have moved the conntrack part into nfnetlink_queue_ct.c to avoid
  peppering the entire nfnetlink_queue.c code with ifdefs.

  I also needed to rename nfnetlink_queue.c to nfnetlink_queue_pkt.c
  to update the net/netfilter/Makefile to support conditional compilation
  of the conntrack integration.

  This patch also adds CONFIG_NETFILTER_QUEUE_CT in case you want to explicitly
  disable the integration between nf_conntrack and nfnetlink_queue.

  Reported-by: Andrew Morton
  Signed-off-by: Pablo Neira Ayuso

  Pablo Neira Ayuso

  2012-06-19 10:44:57 +0800