Stephen Hemminger 9f59365374 nf_nat: use secure_ipv4_port_ephemeral() for NAT port randomization ...

Use incoming network tuple as seed for NAT port randomization.
This avoids concerns of leaking net_random() bits, and also gives better
port distribution. Don't have NAT server, compile tested only.

Signed-off-by: Stephen Hemminger <shemminger@vyatta.com>

[ added missing EXPORT_SYMBOL_GPL ]

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2008-08-18 21:32:32 -07:00

..

arp_tables.c

…

arpt_mangle.c

…

arptable_filter.c

netfilter: arptables in netns for real

2008-07-26 17:48:59 -07:00

ip_queue.c

netns: Use net_eq() to compare net-namespaces for optimization.

2008-07-19 22:34:43 -07:00

ip_tables.c

…

ipt_addrtype.c

netfilter: ipt_addrtype: Fix matching of inverted destination address type

2008-08-18 21:29:57 -07:00

ipt_ah.c

…

ipt_CLUSTERIP.c

net: use the common ascii hex helpers

2008-07-30 16:30:15 -07:00

ipt_ecn.c

…

ipt_ECN.c

…

ipt_LOG.c

…

ipt_MASQUERADE.c

netns: Use net_eq() to compare net-namespaces for optimization.

2008-07-19 22:34:43 -07:00

ipt_NETMAP.c

…

ipt_recent.c

netfilter: ipt_recent: fix race between recent_mt_destroy and proc manipulations

2008-07-31 00:38:31 -07:00

ipt_REDIRECT.c

…

ipt_REJECT.c

…

ipt_ttl.c

…

ipt_TTL.c

…

ipt_ULOG.c

…

iptable_filter.c

…

iptable_mangle.c

…

iptable_raw.c

…

iptable_security.c

netfilter: ip{,6}tables_security: fix future section mismatch

2008-07-26 17:48:38 -07:00

Kconfig

netfilter: make security table depend on NETFILTER_ADVANCED

2008-07-23 16:42:42 -07:00

Makefile

netfilter: ip_tables: add iptables security table for mandatory access control rules

2008-06-09 15:57:24 -07:00

nf_conntrack_l3proto_ipv4_compat.c

netfilter: accounting rework: ct_extend + 64bit counters (v4)

2008-07-21 10:10:58 -07:00

nf_conntrack_l3proto_ipv4.c

…

nf_conntrack_proto_icmp.c

netfilter: nf_conntrack: properly account terminating packets

2008-06-09 15:59:40 -07:00

nf_nat_amanda.c

…

nf_nat_core.c

netfilter: nf_nat_core: eliminate useless find_appropriate_src for IP_NAT_RANGE_PROTO_RANDOM

2008-07-21 10:10:57 -07:00

nf_nat_ftp.c

…

nf_nat_h323.c

…

nf_nat_helper.c

…

nf_nat_irc.c

…

nf_nat_pptp.c

…

nf_nat_proto_common.c

nf_nat: use secure_ipv4_port_ephemeral() for NAT port randomization

2008-08-18 21:32:32 -07:00

nf_nat_proto_dccp.c

…

nf_nat_proto_gre.c

…

nf_nat_proto_icmp.c

…

nf_nat_proto_sctp.c

sctp: remove unnecessary byteshifting, calculate directly in big-endian

2008-07-18 23:07:09 -07:00

nf_nat_proto_tcp.c

…

nf_nat_proto_udp.c

…

nf_nat_proto_udplite.c

…

nf_nat_proto_unknown.c

…

nf_nat_rule.c

…

nf_nat_sip.c

netfilter: nf_nat_sip: c= is optional for session

2008-07-21 10:11:02 -07:00

nf_nat_snmp_basic.c

netfilter: nf_nat_snmp_basic: fix a range check in NAT for SNMP

2008-07-09 15:06:45 -07:00

nf_nat_standalone.c

…

nf_nat_tftp.c

…