Ansis Atteka 703133de33 ip: generate unique IP identificator if local fragmentation is allowed ... If local fragmentation is allowed, then ip_select_ident() and ip_select_ident_more() need to generate unique IDs to ensure correct defragmentation on the peer. For example, if IPsec (tunnel mode) has to encrypt large skbs that have local_df bit set, then all IP fragments that belonged to different ESP datagrams would have used the same identificator. If one of these IP fragments would get lost or reordered, then peer could possibly stitch together wrong IP fragments that did not belong to the same datagram. This would lead to a packet loss or data corruption. Signed-off-by: Ansis Atteka <aatteka@nicira.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2013-09-19 14:11:15 -04:00
..
ipset	netfilter: ipset: Fix serious failure in CIDR tracking	2013-09-16 20:36:09 +02:00
ipvs	ip: generate unique IP identificator if local fragmentation is allowed	2013-09-19 14:11:15 -04:00
Kconfig	netfilter: Fix build errors with xt_socket.c	2013-09-05 14:38:03 -04:00
Makefile	netfilter: add SYNPROXY core/target	2013-08-28 00:27:54 +02:00
core.c	netfilter: nf_conntrack: constify sk_buff argument to nf_ct_attach()	2013-07-31 16:37:38 +02:00
nf_conntrack_acct.c	netfilter: nf_ct_acct: move initialization out of pernet_operations	2013-01-23 12:55:29 +01:00
nf_conntrack_amanda.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_broadcast.c	…
nf_conntrack_core.c	netfilter: add SYNPROXY core/target	2013-08-28 00:27:54 +02:00
nf_conntrack_ecache.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_expect.c	netfilter: ctnetlink: fix incorrect NAT expectation dumping	2013-07-15 11:14:51 +02:00
nf_conntrack_extend.c	…
nf_conntrack_ftp.c	netfilter: Implement RFC 1123 for FTP conntrack	2013-05-27 13:32:43 +02:00
nf_conntrack_h323_asn1.c	…
nf_conntrack_h323_main.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_h323_types.c	…
nf_conntrack_helper.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_irc.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_l3proto_generic.c	…
nf_conntrack_labels.c	netfilter: connlabels: remove unneeded includes	2013-07-31 16:39:18 +02:00
nf_conntrack_netbios_ns.c	…
nf_conntrack_netlink.c	netfilter: ctnetlink: fix uninitialized variable	2013-08-28 00:28:19 +02:00
nf_conntrack_pptp.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_proto.c	netfilter: nf_conntrack: don't send destroy events from iterator	2013-08-09 12:03:33 +02:00
nf_conntrack_proto_dccp.c	netfilter: nf_log: prepare net namespace support for loggers	2013-04-05 20:12:54 +02:00
nf_conntrack_proto_generic.c	…
nf_conntrack_proto_gre.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_proto_sctp.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_proto_tcp.c	netfilter: add SYNPROXY core/target	2013-08-28 00:27:54 +02:00
nf_conntrack_proto_udp.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_proto_udplite.c	netfilter: nf_log: prepare net namespace support for loggers	2013-04-05 20:12:54 +02:00
nf_conntrack_sane.c	netfilter: nf_ct_helper: better logging for dropped packets	2013-02-19 02:48:05 +01:00
nf_conntrack_seqadj.c	netfilter: add SYNPROXY core/target	2013-08-28 00:27:54 +02:00
nf_conntrack_sip.c	netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the packet	2013-04-06 14:03:18 +02:00
nf_conntrack_snmp.c	netfilter: nf_ct_snmp: add include file	2013-01-18 00:28:18 +01:00
nf_conntrack_standalone.c	net: Convert uses of typedef ctl_table to struct ctl_table	2013-06-13 02:36:09 -07:00
nf_conntrack_tftp.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_timeout.c	netfilter: nf_ct_timeout: move initialization out of pernet_operations	2013-01-23 12:56:02 +01:00
nf_conntrack_timestamp.c	netfilter: nf_ct_tstamp: move initialization out of pernet_operations	2013-01-23 12:55:39 +01:00
nf_internals.h	…
nf_log.c	net: Convert uses of typedef ctl_table to struct ctl_table	2013-06-13 02:36:09 -07:00
nf_nat_amanda.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_nat_core.c	netfilter: nf_conntrack: make sequence number adjustments usuable without NAT	2013-08-28 00:26:48 +02:00
nf_nat_ftp.c	netfilter: nf_ct_helper: better logging for dropped packets	2013-02-19 02:48:05 +01:00
nf_nat_helper.c	netfilter: nf_conntrack: make sequence number adjustments usuable without NAT	2013-08-28 00:26:48 +02:00
nf_nat_irc.c	netfilter: nf_ct_helper: better logging for dropped packets	2013-02-19 02:48:05 +01:00
nf_nat_proto_common.c	…
nf_nat_proto_dccp.c	…
nf_nat_proto_sctp.c	net/sctp: Refactor SCTP skb checksum computation	2013-07-27 20:07:15 -07:00
nf_nat_proto_tcp.c	…
nf_nat_proto_udp.c	…
nf_nat_proto_udplite.c	…
nf_nat_proto_unknown.c	…
nf_nat_sip.c	netfilter: nf_conntrack: make sequence number adjustments usuable without NAT	2013-08-28 00:26:48 +02:00
nf_nat_tftp.c	netfilter: nf_ct_helper: better logging for dropped packets	2013-02-19 02:48:05 +01:00
nf_queue.c	netfilter: move skb_gso_segment into nfnetlink_queue module	2013-04-29 20:09:05 +02:00
nf_sockopt.c	…
nf_synproxy_core.c	netfilter: synproxy_core: fix warning in __nf_ct_ext_add_length()	2013-09-04 11:43:36 +02:00
nfnetlink.c	nfnetlink: add support for memory mapped netlink	2013-04-19 14:58:36 -04:00
nfnetlink_acct.c	netfilter: nfnetlink_acct: fix incomplete dumping of objects	2013-06-05 12:36:36 +02:00
nfnetlink_cthelper.c	netfilter: check return code from nla_parse_tested	2013-06-20 11:20:13 +02:00
nfnetlink_cttimeout.c	netfilter: check return code from nla_parse_tested	2013-06-20 11:20:13 +02:00
nfnetlink_log.c	netfilter: nfnetlink_{log,queue}: fix information leaks in netlink message	2013-08-05 17:36:04 +02:00
nfnetlink_queue_core.c	netfilter: nfnetlink_queue: use network skb for sequence adjustment	2013-09-17 13:05:12 +02:00
nfnetlink_queue_ct.c	netfilter: nf_conntrack: make sequence number adjustments usuable without NAT	2013-08-28 00:26:48 +02:00
x_tables.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-05-01 17:51:54 -07:00
xt_AUDIT.c	netfilter: xt_AUDIT: only generate audit log when audit enabled	2013-03-04 14:45:25 +01:00
xt_CHECKSUM.c	…
xt_CLASSIFY.c	…
xt_CONNSECMARK.c	…
xt_CT.c	netfilter: xt_CT: optimize XT_CT_NOTRACK	2013-05-23 11:09:29 +02:00
xt_DSCP.c	…
xt_HL.c	…
xt_HMARK.c	ipv6: Move ipv6_find_hdr() out of Netfilter code.	2012-11-09 17:05:07 -08:00
xt_IDLETIMER.c	…
xt_LED.c	…
xt_LOG.c	netfilter: xt_LOG: fix mark logging for IPv6 packets	2013-05-29 12:29:18 +02:00
xt_NETMAP.c	…
xt_NFLOG.c	netfilter: log: netns NULL ptr bug when calling from conntrack	2013-05-15 14:11:07 +02:00
xt_NFQUEUE.c	netfilter: xt_NFQUEUE: coalesce IPv4 and IPv6 hashing	2013-04-02 01:26:10 +02:00
xt_RATEEST.c	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
xt_REDIRECT.c	…
xt_SECMARK.c	…
xt_TCPMSS.c	netfilter: xt_TCPMSS: correct return value in tcpmss_mangle_packet	2013-09-04 14:20:03 +02:00
xt_TCPOPTSTRIP.c	netfilter: xt_TCPOPTSTRIP: fix possible off by one access	2013-08-01 11:45:15 +02:00
xt_TEE.c	net: pass info struct via netdevice notifier	2013-05-28 13:11:01 -07:00
xt_TPROXY.c	netfilter: tproxy: fix build with IP6_NF_IPTABLES=n	2013-08-05 12:57:38 +02:00
xt_TRACE.c	…
xt_addrtype.c	netfilter: xt_addrtype: fix trivial typo	2013-07-31 16:36:25 +02:00
xt_bpf.c	netfilter: x_tables: add xt_bpf match	2013-01-21 12:20:19 +01:00
xt_cluster.c	…
xt_comment.c	…
xt_connbytes.c	…
xt_connlabel.c	netfilter: add connlabel conntrack extension	2013-01-18 00:28:15 +01:00
xt_connlimit.c	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
xt_connmark.c	…
xt_conntrack.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
xt_cpu.c	…
xt_dccp.c	…
xt_devgroup.c	…
xt_dscp.c	…
xt_ecn.c	…
xt_esp.c	…
xt_hashlimit.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-05-01 17:51:54 -07:00
xt_helper.c	…
xt_hl.c	…
xt_iprange.c	…
xt_ipvs.c	…
xt_length.c	…
xt_limit.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
xt_mac.c	…
xt_mark.c	…
xt_multiport.c	…
xt_nat.c	netfilter: xt_nat: fix incorrect hooks for SNAT and DNAT targets	2012-10-15 13:39:12 +02:00
xt_nfacct.c	…
xt_osf.c	netfilter: nf_log: prepare net namespace support for loggers	2013-04-05 20:12:54 +02:00
xt_owner.c	…
xt_physdev.c	…
xt_pkttype.c	…
xt_policy.c	…
xt_quota.c	…
xt_rateest.c	net_sched: add 64bit rate estimators	2013-06-11 02:51:03 -07:00
xt_realm.c	…
xt_recent.c	proc: Supply PDE attribute setting accessor functions	2013-05-01 17:29:18 -04:00
xt_repldata.h	…
xt_sctp.c	…
xt_set.c	netfilter: ipset: set match: add support to match the counters	2013-04-29 20:09:03 +02:00
xt_socket.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next	2013-08-20 13:30:54 -07:00
xt_state.c	…
xt_statistic.c	…
xt_string.c	…
xt_tcpmss.c	…
xt_tcpudp.c	…
xt_time.c	…
xt_u32.c	…