Ansis Atteka 703133de33 ip: generate unique IP identificator if local fragmentation is allowed ... If local fragmentation is allowed, then ip_select_ident() and ip_select_ident_more() need to generate unique IDs to ensure correct defragmentation on the peer. For example, if IPsec (tunnel mode) has to encrypt large skbs that have local_df bit set, then all IP fragments that belonged to different ESP datagrams would have used the same identificator. If one of these IP fragments would get lost or reordered, then peer could possibly stitch together wrong IP fragments that did not belong to the same datagram. This would lead to a packet loss or data corruption. Signed-off-by: Ansis Atteka <aatteka@nicira.com> Signed-off-by: David S. Miller <davem@davemloft.net>		2013-09-19 14:11:15 -04:00
..
ipset	netfilter: ipset: Fix serious failure in CIDR tracking	2013-09-16 20:36:09 +02:00
ipvs	ip: generate unique IP identificator if local fragmentation is allowed	2013-09-19 14:11:15 -04:00
core.c	netfilter: nf_conntrack: constify sk_buff argument to nf_ct_attach()	2013-07-31 16:37:38 +02:00
Kconfig	netfilter: Fix build errors with xt_socket.c	2013-09-05 14:38:03 -04:00
Makefile	netfilter: add SYNPROXY core/target	2013-08-28 00:27:54 +02:00
nf_conntrack_acct.c	netfilter: nf_ct_acct: move initialization out of pernet_operations	2013-01-23 12:55:29 +01:00
nf_conntrack_amanda.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_broadcast.c
nf_conntrack_core.c	netfilter: add SYNPROXY core/target	2013-08-28 00:27:54 +02:00
nf_conntrack_ecache.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_expect.c	netfilter: ctnetlink: fix incorrect NAT expectation dumping	2013-07-15 11:14:51 +02:00
nf_conntrack_extend.c	netfilter: nf_ct_ext: support variable length extensions	2012-06-16 15:08:49 +02:00
nf_conntrack_ftp.c	netfilter: Implement RFC 1123 for FTP conntrack	2013-05-27 13:32:43 +02:00
nf_conntrack_h323_asn1.c
nf_conntrack_h323_main.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_h323_types.c
nf_conntrack_helper.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_irc.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_l3proto_generic.c
nf_conntrack_labels.c	netfilter: connlabels: remove unneeded includes	2013-07-31 16:39:18 +02:00
nf_conntrack_netbios_ns.c
nf_conntrack_netlink.c	netfilter: ctnetlink: fix uninitialized variable	2013-08-28 00:28:19 +02:00
nf_conntrack_pptp.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_proto.c	netfilter: nf_conntrack: don't send destroy events from iterator	2013-08-09 12:03:33 +02:00
nf_conntrack_proto_dccp.c	netfilter: nf_log: prepare net namespace support for loggers	2013-04-05 20:12:54 +02:00
nf_conntrack_proto_generic.c	netfilter: nf_conntrack: generalize nf_ct_l4proto_net	2012-07-04 19:37:22 +02:00
nf_conntrack_proto_gre.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_proto_sctp.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_proto_tcp.c	netfilter: add SYNPROXY core/target	2013-08-28 00:27:54 +02:00
nf_conntrack_proto_udp.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_proto_udplite.c	netfilter: nf_log: prepare net namespace support for loggers	2013-04-05 20:12:54 +02:00
nf_conntrack_sane.c	netfilter: nf_ct_helper: better logging for dropped packets	2013-02-19 02:48:05 +01:00
nf_conntrack_seqadj.c	netfilter: add SYNPROXY core/target	2013-08-28 00:27:54 +02:00
nf_conntrack_sip.c	netfilter: nf_ct_sip: don't drop packets with offsets pointing outside the packet	2013-04-06 14:03:18 +02:00
nf_conntrack_snmp.c	netfilter: nf_ct_snmp: add include file	2013-01-18 00:28:18 +01:00
nf_conntrack_standalone.c	net: Convert uses of typedef ctl_table to struct ctl_table	2013-06-13 02:36:09 -07:00
nf_conntrack_tftp.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_timeout.c	netfilter: nf_ct_timeout: move initialization out of pernet_operations	2013-01-23 12:56:02 +01:00
nf_conntrack_timestamp.c	netfilter: nf_ct_tstamp: move initialization out of pernet_operations	2013-01-23 12:55:39 +01:00
nf_internals.h	netfilter: pass 'nf_hook_ops' instead of 'list_head' to nf_queue()	2012-09-03 13:52:54 +02:00
nf_log.c	net: Convert uses of typedef ctl_table to struct ctl_table	2013-06-13 02:36:09 -07:00
nf_nat_amanda.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_nat_core.c	netfilter: nf_conntrack: make sequence number adjustments usuable without NAT	2013-08-28 00:26:48 +02:00
nf_nat_ftp.c	netfilter: nf_ct_helper: better logging for dropped packets	2013-02-19 02:48:05 +01:00
nf_nat_helper.c	netfilter: nf_conntrack: make sequence number adjustments usuable without NAT	2013-08-28 00:26:48 +02:00
nf_nat_irc.c	netfilter: nf_ct_helper: better logging for dropped packets	2013-02-19 02:48:05 +01:00
nf_nat_proto_common.c	netfilter: add protocol independent NAT core	2012-08-30 03:00:14 +02:00
nf_nat_proto_dccp.c	netfilter: add protocol independent NAT core	2012-08-30 03:00:14 +02:00
nf_nat_proto_sctp.c	net/sctp: Refactor SCTP skb checksum computation	2013-07-27 20:07:15 -07:00
nf_nat_proto_tcp.c	netfilter: add protocol independent NAT core	2012-08-30 03:00:14 +02:00
nf_nat_proto_udp.c	netfilter: add protocol independent NAT core	2012-08-30 03:00:14 +02:00
nf_nat_proto_udplite.c	netfilter: add protocol independent NAT core	2012-08-30 03:00:14 +02:00
nf_nat_proto_unknown.c	netfilter: add protocol independent NAT core	2012-08-30 03:00:14 +02:00
nf_nat_sip.c	netfilter: nf_conntrack: make sequence number adjustments usuable without NAT	2013-08-28 00:26:48 +02:00
nf_nat_tftp.c	netfilter: nf_ct_helper: better logging for dropped packets	2013-02-19 02:48:05 +01:00
nf_queue.c	netfilter: move skb_gso_segment into nfnetlink_queue module	2013-04-29 20:09:05 +02:00
nf_sockopt.c
nf_synproxy_core.c	netfilter: synproxy_core: fix warning in __nf_ct_ext_add_length()	2013-09-04 11:43:36 +02:00
nfnetlink.c	nfnetlink: add support for memory mapped netlink	2013-04-19 14:58:36 -04:00
nfnetlink_acct.c	netfilter: nfnetlink_acct: fix incomplete dumping of objects	2013-06-05 12:36:36 +02:00
nfnetlink_cthelper.c	netfilter: check return code from nla_parse_tested	2013-06-20 11:20:13 +02:00
nfnetlink_cttimeout.c	netfilter: check return code from nla_parse_tested	2013-06-20 11:20:13 +02:00
nfnetlink_log.c	netfilter: nfnetlink_{log,queue}: fix information leaks in netlink message	2013-08-05 17:36:04 +02:00
nfnetlink_queue_core.c	netfilter: nfnetlink_queue: use network skb for sequence adjustment	2013-09-17 13:05:12 +02:00
nfnetlink_queue_ct.c	netfilter: nf_conntrack: make sequence number adjustments usuable without NAT	2013-08-28 00:26:48 +02:00
x_tables.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-05-01 17:51:54 -07:00
xt_addrtype.c	netfilter: xt_addrtype: fix trivial typo	2013-07-31 16:36:25 +02:00
xt_AUDIT.c	netfilter: xt_AUDIT: only generate audit log when audit enabled	2013-03-04 14:45:25 +01:00
xt_bpf.c	netfilter: x_tables: add xt_bpf match	2013-01-21 12:20:19 +01:00
xt_CHECKSUM.c
xt_CLASSIFY.c
xt_cluster.c
xt_comment.c
xt_connbytes.c
xt_connlabel.c	netfilter: add connlabel conntrack extension	2013-01-18 00:28:15 +01:00
xt_connlimit.c	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
xt_connmark.c
xt_CONNSECMARK.c
xt_conntrack.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
xt_cpu.c
xt_CT.c	netfilter: xt_CT: optimize XT_CT_NOTRACK	2013-05-23 11:09:29 +02:00
xt_dccp.c
xt_devgroup.c
xt_dscp.c
xt_DSCP.c
xt_ecn.c
xt_esp.c
xt_hashlimit.c	Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/viro/vfs	2013-05-01 17:51:54 -07:00
xt_helper.c
xt_hl.c
xt_HL.c
xt_HMARK.c	ipv6: Move ipv6_find_hdr() out of Netfilter code.	2012-11-09 17:05:07 -08:00
xt_IDLETIMER.c
xt_iprange.c
xt_ipvs.c	ipvs: API change to avoid rescan of IPv6 exthdr	2012-09-28 11:34:33 +09:00
xt_LED.c
xt_length.c
xt_limit.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
xt_LOG.c	netfilter: xt_LOG: fix mark logging for IPv6 packets	2013-05-29 12:29:18 +02:00
xt_mac.c
xt_mark.c
xt_multiport.c
xt_nat.c	netfilter: xt_nat: fix incorrect hooks for SNAT and DNAT targets	2012-10-15 13:39:12 +02:00
xt_NETMAP.c	netfilter: combine ipt_NETMAP and ip6t_NETMAP	2012-09-21 12:11:08 +02:00
xt_nfacct.c
xt_NFLOG.c	netfilter: log: netns NULL ptr bug when calling from conntrack	2013-05-15 14:11:07 +02:00
xt_NFQUEUE.c	netfilter: xt_NFQUEUE: coalesce IPv4 and IPv6 hashing	2013-04-02 01:26:10 +02:00
xt_osf.c	netfilter: nf_log: prepare net namespace support for loggers	2013-04-05 20:12:54 +02:00
xt_owner.c	userns: xt_owner: Add basic user namespace support.	2012-08-14 21:55:30 -07:00
xt_physdev.c
xt_pkttype.c
xt_policy.c
xt_quota.c
xt_rateest.c	net_sched: add 64bit rate estimators	2013-06-11 02:51:03 -07:00
xt_RATEEST.c	hlist: drop the node parameter from iterators	2013-02-27 19:10:24 -08:00
xt_realm.c
xt_recent.c	proc: Supply PDE attribute setting accessor functions	2013-05-01 17:29:18 -04:00
xt_REDIRECT.c	netfilter: combine ipt_REDIRECT and ip6t_REDIRECT	2012-09-21 12:12:05 +02:00
xt_repldata.h
xt_sctp.c
xt_SECMARK.c
xt_set.c	netfilter: ipset: set match: add support to match the counters	2013-04-29 20:09:03 +02:00
xt_socket.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next	2013-08-20 13:30:54 -07:00
xt_state.c
xt_statistic.c
xt_string.c
xt_tcpmss.c
xt_TCPMSS.c	netfilter: xt_TCPMSS: correct return value in tcpmss_mangle_packet	2013-09-04 14:20:03 +02:00
xt_TCPOPTSTRIP.c	netfilter: xt_TCPOPTSTRIP: fix possible off by one access	2013-08-01 11:45:15 +02:00
xt_tcpudp.c
xt_TEE.c	net: pass info struct via netdevice notifier	2013-05-28 13:11:01 -07:00
xt_time.c	netfilter: xt_time: add support to ignore day transition	2012-09-24 14:29:01 +02:00
xt_TPROXY.c	netfilter: tproxy: fix build with IP6_NF_IPTABLES=n	2013-08-05 12:57:38 +02:00
xt_TRACE.c
xt_u32.c