linux.git/include/linux/netfilter, branch v2.6.26

netfilter: nf_conntrack_sip: restrict RTP expect flushing on error to last request

2008-05-08T08:15:21+00:00

Some Inovaphone PBXs exhibit very stange behaviour: when dialing for
example "123", the device sends INVITE requests for "1", "12" and
"123" back to back.  The first requests will elicit error responses
from the receiver, causing the SIP helper to flush the RTP
expectations even though we might still see a positive response.

Note the sequence number of the last INVITE request that contained a
media description and only flush the expectations when receiving a
negative response for that sequence number.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_conntrack: add DCCP protocol support

2008-04-14T09:15:49+00:00

Add DCCP conntrack helper. Thanks to Gerrit Renker 
for review and testing.

Signed-off-by: Patrick McHardy

[NETFILTER]: annotate {arp,ip,ip6,x}tables with const

2008-04-14T09:15:35+00:00

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy

[NETFILTER]: xt_sctp: simplify xt_sctp.h

2008-04-14T07:56:04+00:00

The use of xt_sctp.h flagged up -Wshadow warnings in userspace, which
prompted me to look at it and clean it up. Basic operations have been
directly replaced by library calls (memcpy, memset is both available
in the kernel and userspace, and usually faster than a self-made
loop). The is_set and is_clear functions now use a processing time
shortcut, too.

Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy

[NETFILTER]: nf_conntrack_sip: RTP routing optimization

2008-03-26T03:26:43+00:00

Optimize call routing between NATed endpoints: when an external
registrar sends a media description that contains an existing RTP
expectation from a different SNATed connection, the gatekeeper
is trying to route the call directly between the two endpoints.

We assume both endpoints can reach each other directly and
"un-NAT" the addresses, which makes the media stream go between
the two endpoints directly.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_conntrack_sip: support multiple media channels

2008-03-26T03:26:24+00:00

Add support for multiple media channels and use it to create
expectations for video streams when present.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_nat_sip: split up SDP mangling

2008-03-26T03:26:08+00:00

The SDP connection addresses may be contained in the payload multiple
times (in the session description and/or once per media description),
currently only the session description is properly updated. Split up
SDP mangling so the function setting up expectations only updates the
media port, update connection addresses from media descriptions while
parsing them and at the end update the session description when the
final addresses are known.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_conntrack_sip: create RTCP expectations

2008-03-26T03:25:49+00:00

Create expectations for the RTCP connections in addition to RTP connections.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_conntrack_sip: create signalling expectations

2008-03-26T03:25:13+00:00

Create expectations for incoming signalling connections when seeing
a REGISTER request. This is needed when the registrar uses a
different source port number for signalling messages and for receiving
incoming calls from other endpoints than the registrar.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: nf_conntrack_sip: introduce URI and header parameter parsing helpers

2008-03-26T03:24:24+00:00

Introduce URI and header parameter parsing helpers. These are needed
by the conntrack helper to parse expiration values in Contact: header
parameters and by the NAT helper to properly update the Via-header
rport=, received= and maddr= parameters.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller