linux.git/net/netfilter/nft_synproxy.c, branch v5.10 Linux kernel source tree netfilter: Add MODULE_DESCRIPTION entries to kernel modules 2020-06-24T22:50:31+00:00 Rob Gill rrobgill@protonmail.com 2020-06-21T05:27:36+00:00 4cacc39516784670aa09833a9ec8bf3e90bef561 The user tool modinfo is used to get information on kernel modules, including a description where it is available. This patch adds a brief MODULE_DESCRIPTION to netfilter kernel modules (descriptions taken from Kconfig file or code comments) Signed-off-by: Rob Gill <rrobgill@protonmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 
The user tool modinfo is used to get information on kernel modules, including a
description where it is available.

This patch adds a brief MODULE_DESCRIPTION to netfilter kernel modules
(descriptions taken from Kconfig file or code comments)

Signed-off-by: Rob Gill <rrobgill@protonmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nft_synproxy: add synproxy stateful object support 2019-09-10T20:35:37+00:00 Fernando Fernandez Mancera ffmancera@riseup.net 2019-09-07T16:04:26+00:00 ee394f96ad7517fbc0de9106dcc7ce9efb14f264 Register a new synproxy stateful object type into the stateful object infrastructure. Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 
Register a new synproxy stateful object type into the stateful object
infrastructure.

Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: synproxy: rename mss synproxy_options field 2019-08-03T16:39:08+00:00 Fernando Fernandez Mancera ffmancera@riseup.net 2019-07-10T10:05:59+00:00 8c0bb7873815bf8c3c4dfb24e8ebf4fefb4c35d2 After introduce "mss_encode" field in the synproxy_options struct the field "mss" is a little confusing. It has been renamed to "mss_option". Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 
After introduce "mss_encode" field in the synproxy_options struct the field
"mss" is a little confusing. It has been renamed to "mss_option".

Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: synproxy: fix erroneous tcp mss option 2019-07-16T11:17:01+00:00 Fernando Fernandez Mancera ffmancera@riseup.net 2019-07-10T10:05:57+00:00 b83329fb473f29d34d85d642e3a3313bb2871fa9 Now synproxy sends the mss value set by the user on client syn-ack packet instead of the mss value that client announced. Fixes: 48b1de4c110a ("netfilter: add SYNPROXY core/target") Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 
Now synproxy sends the mss value set by the user on client syn-ack packet
instead of the mss value that client announced.

Fixes: 48b1de4c110a ("netfilter: add SYNPROXY core/target")
Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
netfilter: nf_tables: Add synproxy support 2019-07-05T19:34:23+00:00 Fernando Fernandez Mancera ffmancera@riseup.net 2019-06-26T10:59:19+00:00 ad49d86e07a497e834cb06f2b151dccd75f8e148 Add synproxy support for nf_tables. This behaves like the iptables synproxy target but it is structured in a way that allows us to propose improvements in the future. Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> 
Add synproxy support for nf_tables. This behaves like the iptables
synproxy target but it is structured in a way that allows us to propose
improvements in the future.

Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>