linux/net/netfilter
Jozsef Kadlecsik b2155e7f70 [NETFILTER]: nf_conntrack: TCP conntrack reopening fix
TCP connection tracking in netfilter did not handle TCP reopening
properly: active close was taken into account for one side only and
not for any side, which is fixed now. The patch includes more comments
to explain the logic how the different cases are handled.
The bug was discovered by Jeff Chua.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-02-07 17:54:56 -08:00
..
Kconfig [NETFILTER]: Rename ipt_iprange to xt_iprange 2008-01-28 15:02:27 -08:00
Makefile [NETFILTER]: kill nf_sysctl.c 2008-01-28 15:02:40 -08:00
core.c [NETFILTER]: kill nf_sysctl.c 2008-01-28 15:02:40 -08:00
nf_conntrack_amanda.c [NETFILTER]: Replace sk_buff ** with sk_buff * 2007-10-15 12:26:29 -07:00
nf_conntrack_core.c [NETFILTER]: nf_conntrack: kill unused static inline (do_iter) 2008-01-31 19:28:03 -08:00
nf_conntrack_ecache.c [NETFILTER]: nf_conntrack_expect: function naming unification 2007-07-10 22:17:53 -07:00
nf_conntrack_expect.c [NETFILTER]: nf_conntrack: switch rwlock to spinlock 2008-01-31 19:27:54 -08:00
nf_conntrack_extend.c [NETFILTER]: Fix NULL pointer dereference in nf_nat_move_storage() 2007-11-15 15:52:32 -08:00
nf_conntrack_ftp.c [NETFILTER]: Introduce nf_inet_address 2008-01-28 14:59:07 -08:00
nf_conntrack_h323_asn1.c [NETFILTER]: nf_conntrack_h323: constify and annotate H.323 helper 2008-01-31 19:28:07 -08:00
nf_conntrack_h323_main.c [NETFILTER]: nf_conntrack_h323: constify and annotate H.323 helper 2008-01-31 19:28:07 -08:00
nf_conntrack_h323_types.c [NETFILTER]: nf_conntrack_h323: constify and annotate H.323 helper 2008-01-31 19:28:07 -08:00
nf_conntrack_helper.c [NETFILTER]: nf_conntrack: switch rwlock to spinlock 2008-01-31 19:27:54 -08:00
nf_conntrack_irc.c [NETFILTER]: conntrack: get rid of sparse warnings 2008-01-31 19:27:46 -08:00
nf_conntrack_l3proto_generic.c [NETFILTER]: nf_conntrack: remove print_conntrack function from l3protos 2008-01-28 15:02:41 -08:00
nf_conntrack_netbios_ns.c [NETFILTER]: Replace sk_buff ** with sk_buff * 2007-10-15 12:26:29 -07:00
nf_conntrack_netlink.c [NETFILTER]: nf_conntrack_netlink: transmit mark during all events 2008-01-31 19:28:02 -08:00
nf_conntrack_pptp.c [NETFILTER]: nf_{conntrack,nat}_pptp: annotate PPtP helper with const 2008-01-31 19:28:09 -08:00
nf_conntrack_proto.c [NETFILTER]: Use the ctl paths instead of hand-made analogue 2008-01-28 15:01:11 -08:00
nf_conntrack_proto_generic.c [NETFILTER]: nf_conntrack: naming unification 2008-01-31 19:27:59 -08:00
nf_conntrack_proto_gre.c [NETFILTER]: nf_{conntrack,nat}_proto_gre: annotate with const 2008-01-31 19:28:12 -08:00
nf_conntrack_proto_sctp.c [NETFILTER]: nf_conntrack: naming unification 2008-01-31 19:27:59 -08:00
nf_conntrack_proto_tcp.c [NETFILTER]: nf_conntrack: TCP conntrack reopening fix 2008-02-07 17:54:56 -08:00
nf_conntrack_proto_udp.c [NETFILTER]: nf_{conntrack,nat}_proto_udp{,lite}: annotate with const 2008-01-31 19:28:11 -08:00
nf_conntrack_proto_udplite.c [NETFILTER]: nf_{conntrack,nat}_proto_udp{,lite}: annotate with const 2008-01-31 19:28:11 -08:00
nf_conntrack_sane.c [NETFILTER]: nf_conntrack_sane: annotate SANE helper with const 2008-01-31 19:28:10 -08:00
nf_conntrack_sip.c [NETFILTER]: nf_{conntrack,nat}_sip: annotate SIP helper with const 2008-01-31 19:28:08 -08:00
nf_conntrack_standalone.c [NETFILTER]: nf_conntrack: fix sparse warning 2008-01-31 19:28:15 -08:00
nf_conntrack_tftp.c [NETFILTER]: nf_{conntrack,nat}_tftp: annotate TFTP helper with const 2008-01-31 19:28:08 -08:00
nf_internals.h [NETFILTER]: Replace sk_buff ** with sk_buff * 2007-10-15 12:26:29 -07:00
nf_log.c [NETFILTER]: Supress some sparse warnings 2008-01-31 19:27:27 -08:00
nf_queue.c [NETFILTER]: constify nf_afinfo 2008-01-28 14:59:05 -08:00
nf_sockopt.c [NETFILTER]: fix compat_nf_sockopt typo 2007-11-15 14:29:21 -08:00
nfnetlink.c [NETNS]: Consolidate kernel netlink socket destruction. 2008-01-28 15:08:07 -08:00
nfnetlink_log.c [NETFILTER]: nfnetlink_log: sparse warning fixes 2008-01-31 19:27:45 -08:00
nfnetlink_queue.c [NETFILTER]: Supress some sparse warnings 2008-01-31 19:27:27 -08:00
x_tables.c [NETFILTER]: x_tables: create per-netns /proc/net/*_tables_* 2008-01-31 19:28:06 -08:00
xt_CLASSIFY.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_CONNMARK.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_CONNSECMARK.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_DSCP.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_MARK.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_NFLOG.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_NFQUEUE.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_NOTRACK.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_RATEEST.c [NET_SCHED]: Convert packet schedulers from rtnetlink to new netlink API 2008-01-28 15:11:10 -08:00
xt_SECMARK.c SELinux: Enable dynamic enable/disable of the network access checks 2008-01-30 08:17:26 +11:00
xt_TCPMSS.c [NETFILTER]: xt_TCPMSS: consider reverse route's MTU in clamp-to-pmtu 2008-01-31 19:27:42 -08:00
xt_TCPOPTSTRIP.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_TRACE.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_comment.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_connbytes.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_connlimit.c [NETFILTER]: nf_conntrack: optimize __nf_conntrack_find() 2008-01-31 19:27:55 -08:00
xt_connmark.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_conntrack.c [NETFILTER]: xt_conntrack: add port and direction matching 2008-01-31 19:27:31 -08:00
xt_dccp.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_dscp.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_esp.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_hashlimit.c [NETFILTER]: Ipv6-related xt_hashlimit compilation fix. 2008-01-31 19:28:36 -08:00
xt_helper.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_iprange.c [NETFILTER]: xt_iprange: fix sparse warnings 2008-01-31 19:28:16 -08:00
xt_length.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_limit.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_mac.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_mark.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_multiport.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_owner.c [NETFILTER]: xt_owner: allow matching UID/GID ranges 2008-01-31 19:27:43 -08:00
xt_physdev.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_pkttype.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_policy.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_quota.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_rateest.c [NETFILTER]: x_tables: add rateest match 2008-01-28 14:56:03 -08:00
xt_realm.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_sctp.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_state.c [NETFILTER]: x_tables: use %u format specifiers 2008-01-28 14:59:07 -08:00
xt_statistic.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_string.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_tcpmss.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_tcpudp.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_time.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00
xt_u32.c [NETFILTER]: Update modules' descriptions 2008-01-28 15:02:26 -08:00