Hannes Frederic Sowa 8ed1dc44d3 ipv4: introduce hardened ip_no_pmtu_disc mode ... This new ip_no_pmtu_disc mode only allowes fragmentation-needed errors to be honored by protocols which do more stringent validation on the ICMP's packet payload. This knob is useful for people who e.g. want to run an unmodified DNS server in a namespace where they need to use pmtu for TCP connections (as they are used for zone transfers or fallback for requests) but don't want to use possibly spoofed UDP pmtu information. Currently the whitelisted protocols are TCP, SCTP and DCCP as they check if the returned packet is in the window or if the association is valid. Cc: Eric Dumazet <eric.dumazet@gmail.com> Cc: David Miller <davem@davemloft.net> Cc: John Heffner <johnwheffner@gmail.com> Suggested-by: Florian Weimer <fweimer@redhat.com> Signed-off-by: Hannes Frederic Sowa <hannes@stressinduktion.org> Signed-off-by: David S. Miller <davem@davemloft.net>		2014-01-13 11:22:55 -08:00
..
ccids	dccp: make local variable static	2014-01-04 20:18:50 -05:00
ackvec.c
ackvec.h	net: dccp: Remove extern from function prototypes	2013-10-19 19:12:11 -04:00
ccid.c
ccid.h	net: dccp: Remove extern from function prototypes	2013-10-19 19:12:11 -04:00
dccp.h	dccp: remove obsolete code	2014-01-04 20:18:49 -05:00
diag.c
feat.c
feat.h	net: dccp: Remove extern from function prototypes	2013-10-19 19:12:11 -04:00
input.c
ipv4.c	ipv4: introduce hardened ip_no_pmtu_disc mode	2014-01-13 11:22:55 -08:00
ipv6.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/klassert/ipsec-next	2013-12-19 18:37:49 -05:00
ipv6.h	inet: includes a sock_common in request_sock	2013-10-10 00:08:07 -04:00
Kconfig
Makefile
minisocks.c	inet: rename ir_loc_port to ir_num	2013-10-10 14:37:35 -04:00
options.c	dccp: remove obsolete code	2014-01-04 20:18:49 -05:00
output.c	inet: rename ir_loc_port to ir_num	2013-10-10 14:37:35 -04:00
probe.c	dccp: catch failed request_module call in dccp_probe init	2013-12-19 19:25:50 -05:00
proto.c
qpolicy.c
sysctl.c
timer.c