Jiri Olsa cbdd769ab9 netfilter: nf_conntrack_defrag: check socket type before touching nodefrag flag ...

we need to check proper socket type within ipv4_conntrack_defrag
function before referencing the nodefrag flag.

For example the tun driver receive path produces skbs with
AF_UNSPEC socket type, and so current code is causing unwanted
fragmented packets going out.

Signed-off-by: Jiri Olsa <jolsa@redhat.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2010-09-22 13:13:34 -07:00

..

arp_tables.c

netfilter: fix CONFIG_COMPAT support

2010-08-23 14:41:22 -07:00

arpt_mangle.c

netfilter: xtables: substitute temporary defines by final name

2010-05-11 18:31:17 +02:00

arptable_filter.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

ip_queue.c

netfilter: ip_queue: rwlock to spinlock conversion

2010-06-09 15:47:41 +02:00

ip_tables.c

netfilter: fix CONFIG_COMPAT support

2010-08-23 14:41:22 -07:00

ipt_addrtype.c

netfilter: xtables: deconstify struct xt_action_param for matches

2010-05-11 18:33:37 +02:00

ipt_ah.c

netfilter: xtables: change hotdrop pointer to direct modification

2010-05-11 18:35:27 +02:00

ipt_CLUSTERIP.c

net: remove last uses of __attribute__((packed))

2010-07-21 14:44:29 -07:00

ipt_ecn.c

netfilter: xtables: change hotdrop pointer to direct modification

2010-05-11 18:35:27 +02:00

ipt_ECN.c

netfilter: xtables: substitute temporary defines by final name

2010-05-11 18:31:17 +02:00

ipt_LOG.c

netfilter: ipt_LOG/ip6t_LOG: add option to print decoded MAC header

2010-06-28 14:16:08 +02:00

ipt_MASQUERADE.c

netfilter: xtables: substitute temporary defines by final name

2010-05-11 18:31:17 +02:00

ipt_NETMAP.c

netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN

2010-06-17 06:12:26 +02:00

ipt_REDIRECT.c

netfilter: xtables: substitute temporary defines by final name

2010-05-11 18:31:17 +02:00

ipt_REJECT.c

netfilter: fix ipt_REJECT TCP RST routing for indev == outdev

2010-09-22 13:13:32 -07:00

ipt_ULOG.c

netfilter: xtables: substitute temporary defines by final name

2010-05-11 18:31:17 +02:00

iptable_filter.c

netfilter: cleanup printk messages

2010-05-13 15:02:08 +02:00

iptable_mangle.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

iptable_raw.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

iptable_security.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

Kconfig

netfilter: Kconfig spelling fixes (trivial)

2009-03-16 15:17:23 +01:00

Makefile

netfilter: Combine ipt_ttl and ip6t_hl source

2009-02-18 18:39:31 +01:00

nf_conntrack_l3proto_ipv4_compat.c

netfilter: nf_conntrack: extend with extra stat counter

2010-04-23 12:34:56 +02:00

nf_conntrack_l3proto_ipv4.c

netfilter: cleanup printk messages

2010-05-13 15:02:08 +02:00

nf_conntrack_proto_icmp.c

netfilter: nf_conntrack: add support for "conntrack zones"

2010-02-15 18:13:33 +01:00

nf_defrag_ipv4.c

netfilter: nf_conntrack_defrag: check socket type before touching nodefrag flag

2010-09-22 13:13:34 -07:00

nf_nat_amanda.c

[NETFILTER]: remove unneeded rcu_dereference() calls

2007-11-07 04:08:23 -08:00

nf_nat_core.c

netfilter: nf_nat: use local variable hdrlen

2010-08-02 17:15:30 +02:00

nf_nat_ftp.c

netfilter: nf_nat_ftp: remove (*mangle[]) array and functions, use %pI4

2010-01-11 11:49:51 +01:00

nf_nat_h323.c

netfilter: cleanup printk messages

2010-05-13 15:02:08 +02:00

nf_nat_helper.c

include cleanup: Update gfp.h and slab.h includes to prepare for breaking implicit slab.h inclusion from percpu.h

2010-03-30 22:02:32 +09:00

nf_nat_irc.c

net: replace NIPQUAD() in net/ipv4/netfilter/

2008-10-31 00:53:08 -07:00

nf_nat_pptp.c

netfilter: nf_conntrack: add support for "conntrack zones"

2010-02-15 18:13:33 +01:00

nf_nat_proto_common.c

netfilter: nf_nat: don't check if the tuple is unique when there isn't any other choice

2010-08-02 17:35:49 +02:00

nf_nat_proto_dccp.c

netfilter: nf_nat: make unique_tuple return void

2010-08-02 17:20:54 +02:00

nf_nat_proto_gre.c

netfilter: nf_nat: don't check if the tuple is unique when there isn't any other choice

2010-08-02 17:35:49 +02:00

nf_nat_proto_icmp.c

netfilter: nf_nat: don't check if the tuple is unique when there isn't any other choice

2010-08-02 17:35:49 +02:00

nf_nat_proto_sctp.c

netfilter: nf_nat: make unique_tuple return void

2010-08-02 17:20:54 +02:00

nf_nat_proto_tcp.c

netfilter: nf_nat: make unique_tuple return void

2010-08-02 17:20:54 +02:00

nf_nat_proto_udp.c

netfilter: nf_nat: make unique_tuple return void

2010-08-02 17:20:54 +02:00

nf_nat_proto_udplite.c

netfilter: nf_nat: make unique_tuple return void

2010-08-02 17:20:54 +02:00

nf_nat_proto_unknown.c

netfilter: nf_nat: make unique_tuple return void

2010-08-02 17:20:54 +02:00

nf_nat_rule.c

netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN

2010-06-17 06:12:26 +02:00

nf_nat_sip.c

netfilter: nf_nat_sip: add TCP support

2010-02-11 12:29:38 +01:00

nf_nat_snmp_basic.c

netfilter: nf_nat_snmp: fix checksum calculation (v4)

2010-09-22 13:13:33 -07:00

nf_nat_standalone.c

netfilter: nf_nat: support user-specified SNAT rules in LOCAL_IN

2010-06-17 06:12:26 +02:00

nf_nat_tftp.c

netfilter: fix some coding styles and remove moduleparam.h

2010-04-13 11:25:41 +02:00