linux.git/net/ipv4/netfilter, branch v2.6.13

[NETFILTER]: Fix HW checksum handling in ip_queue/ip6_queue

2005-08-23T17:10:35+00:00

The checksum needs to be filled in on output, after mangling a packet
ip_summed needs to be reset.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Fix HW checksum handling in TCPMSS target

2005-08-21T00:40:41+00:00

Most importantly, remove bogus BUG() in receive path.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Fix HW checksum handling in ECN target

2005-08-21T00:39:15+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Fix ECN target TCP marking

2005-08-21T00:38:40+00:00

An incorrect check made it bail out before doing anything.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[PATCH] don't try to do any NAT on untracked connections

2005-08-08T18:48:28+00:00

With the introduction of 'rustynat' in 2.6.11, the old tricks of preventing
NAT of 'untracked' connections (e.g. NOTRACK target in 'raw' table) are no
longer sufficient.

The ip_conntrack_untracked.status |= IPS_NAT_DONE_MASK effectively
prevents iteration of the 'nat' table, but doesn't prevent nat_packet()
to be executed.  Since nr_manips is gone in 'rustynat', nat_packet() now
implicitly thinks that it has to do NAT on the packet.

This patch fixes that problem by explicitly checking for
ip_conntrack_untracked in ip_nat_fn().

Signed-off-by: Harald Welte 
Signed-off-by: Linus Torvalds

[NETFILTER] Inherit masq_index to slave connections

2005-07-31T00:44:07+00:00

masq_index is used for cleanup in case the interface address changes
(such as a dialup ppp link with dynamic addreses).  Without this patch,
slave connections are not evicted in such a case, since they don't inherit
masq_index.

Signed-off-by: Harald Welte 
Signed-off-by: David S. Miller

[NETFILTER]: Fix -Wunder error in ip_conntrack_core.c

2005-07-27T21:46:03+00:00

Signed-off-by: Nick Sillik 
Signed-off-by: David S. Miller

[NETFILTER]: Use correct byteorder in ICMP NAT

2005-07-22T19:51:38+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Wait until all references to ip_conntrack_untracked are dropped on unload

2005-07-22T19:51:03+00:00

Fixes a crash when unloading ip_conntrack.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETFILTER]: Fix potential memory corruption in NAT code (aka memory NAT)

2005-07-22T19:50:29+00:00

The portptr pointing to the port in the conntrack tuple is declared static,
which could result in memory corruption when two packets of the same
protocol are NATed at the same time and one conntrack goes away.

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller