linux-stable.git/net/ipv4, branch linux-2.6.12.y

[PATCH] Fix DST leak in icmp_push_reply()

2005-08-29T16:55:12+00:00

Based upon a bug report and initial patch by
Ollie Wild.

Signed-off-by: Patrick McHardy 
Signed-off-by: "David S. Miller" 
Signed-off-by: Chris Wright

[PATCH] Restrict socket policy loading to CAP_NET_ADMIN - CAN-2005-2555

2005-08-29T16:55:11+00:00

The interface needs much redesigning if we wish to allow
normal users to do this in some way.

Signed-off-by: Herbert Xu 
Signed-off-by: "David S. Miller" 
Signed-off-by: Chris Wright

[PATCH] Wait until all references to ip_conntrack_untracked are dropped on unload

2005-08-05T07:04:20+00:00

[NETFILTER]: Wait until all references to ip_conntrack_untracked are dropped on unload

Fixes a crash when unloading ip_conntrack.

Signed-off-by: Patrick McHardy 
Signed-off-by: Chris Wright 
Signed-off-by: Greg Kroah-Hartman

[PATCH] Fix potential memory corruption in NAT code (aka memory NAT)

2005-08-05T07:04:19+00:00

[NETFILTER]: Fix potential memory corruption in NAT code (aka memory NAT)

The portptr pointing to the port in the conntrack tuple is declared static,
which could result in memory corruption when two packets of the same
protocol are NATed at the same time and one conntrack goes away.

Signed-off-by: Patrick McHardy 
Signed-off-by: Chris Wright 
Signed-off-by: Greg Kroah-Hartman

[PATCH] revert nf_reset change

2005-07-15T21:15:24+00:00

[NETFILTER]: Revert nf_reset change

Revert the nf_reset change that caused so much trouble, drop conntrack
references manually before packets are queued to packet sockets.

Adapted for 2.6.12 by Daniel Drake 

Signed-off-by: Phil Oester 
Signed-off-by: Patrick McHardy 
Signed-off-by: Chris Wright 
Signed-off-by: Greg Kroah-Hartman

[NETFILTER]: ipt_recent: last_pkts is an array of "unsigned long" not "u_int32_t"

2005-06-16T03:51:14+00:00

This fixes various crashes on 64-bit when using this module.

Based upon a patch by Juergen Kreileder .

Signed-off-by: David S. Miller 
ACKed-by: Patrick McHardy

[NETFILTER]: Advance seq-file position in exp_next_seq()

2005-06-14T01:27:13+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[IPV4]: Sysctl configurable icmp error source address.

2005-06-13T22:19:03+00:00

This patch alows you to change the source address of icmp error
messages. It applies cleanly to 2.6.11.11 and retains the default
behaviour.

In the old (default) behaviour icmp error messages are sent with the ip
of the exiting interface.

The new behaviour (when the sysctl variable is toggled on), it will send
the message with the ip of the interface that received the packet that
caused the icmp error. This is the behaviour network administrators will
expect from a router. It makes debugging complicated network layouts
much easier. Also, all 'vendor routers' I know of have the later
behaviour.

Signed-off-by: David S. Miller

[SCTP] Add support for ip_nonlocal_bind sysctl & IP_FREEBIND socket option

2005-06-13T22:12:33+00:00

Signed-off-by: Neil Horman 
Signed-off-by: Sridhar Samudrala 
Signed-off-by: David S. Miller

[IPV4]: Multipath modules need a license to prevent kernel tainting.

2005-06-13T21:29:06+00:00

Signed-off-by: Randy Dunlap 
Signed-off-by: David S. Miller