Martin Topholm a6441b7a39 netfilter: synproxy: send mss option to backend ...

When the synproxy_parse_options is called on the client ack the mss
option will not be present. Consequently mss wont be included in the
backend syn packet, which falls back to 536 bytes mss.

Therefore XT_SYNPROXY_OPT_MSS is explicitly flagged when recovering mss
value from cookie.

Signed-off-by: Martin Topholm <mph@one.com>
Reviewed-by: Jesper Dangaard Brouer <brouer@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2013-11-18 12:53:36 +01:00

..

ip6_tables.c

netfilter: x_tables: fix ordering of jumpstack allocation and table update

2013-10-22 10:11:29 +02:00

ip6t_ah.c

…

ip6t_eui64.c

…

ip6t_frag.c

…

ip6t_hbh.c

…

ip6t_ipv6header.c

…

ip6t_MASQUERADE.c

netfilter: nf_conntrack: don't send destroy events from iterator

2013-08-09 12:03:33 +02:00

ip6t_mh.c

…

ip6t_NPT.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2013-04-07 18:37:01 -04:00

ip6t_REJECT.c

netfilter: ip6t_REJECT: skip checksum verification for outgoing ipv6 packets

2013-10-23 11:20:00 +02:00

ip6t_rpfilter.c

netfilter: xt_rpfilter: skip locally generated broadcast/multicast, too

2013-04-19 00:11:59 +02:00

ip6t_rt.c

…

ip6t_SYNPROXY.c

netfilter: synproxy: send mss option to backend

2013-11-18 12:53:36 +01:00

ip6table_filter.c

netfilter: pass hook ops to hookfn

2013-10-14 11:29:31 +02:00

ip6table_mangle.c

netfilter: pass hook ops to hookfn

2013-10-14 11:29:31 +02:00

ip6table_nat.c

netfilter: pass hook ops to hookfn

2013-10-14 11:29:31 +02:00

ip6table_raw.c

netfilter: pass hook ops to hookfn

2013-10-14 11:29:31 +02:00

ip6table_security.c

netfilter: pass hook ops to hookfn

2013-10-14 11:29:31 +02:00

Kconfig

netfilter: nf_tables: Add support for IPv6 NAT

2013-10-14 18:00:58 +02:00

Makefile

netfilter: nf_tables: Add support for IPv6 NAT

2013-10-14 18:00:58 +02:00

nf_conntrack_l3proto_ipv6.c

netfilter: push reasm skb through instead of original frag skbs

2013-11-11 00:19:35 -05:00

nf_conntrack_proto_icmpv6.c

netfilter: nf_log: prepare net namespace support for loggers

2013-04-05 20:12:54 +02:00

nf_conntrack_reasm.c

netfilter: push reasm skb through instead of original frag skbs

2013-11-11 00:19:35 -05:00

nf_defrag_ipv6_hooks.c

netfilter: push reasm skb through instead of original frag skbs

2013-11-11 00:19:35 -05:00

nf_nat_l3proto_ipv6.c

…

nf_nat_proto_icmpv6.c

netfilter: nf_nat_proto_icmpv6:: fix wrong comparison in icmpv6_manip_pkt

2013-09-13 11:58:48 +02:00

nf_tables_ipv6.c

netfilter: nf_tables: complete net namespace support

2013-10-14 18:00:59 +02:00

nft_chain_nat_ipv6.c

netfilter: nf_tables: Add support for IPv6 NAT

2013-10-14 18:00:58 +02:00

nft_chain_route_ipv6.c

netfilter: nf_tables: add compatibility layer for x_tables

2013-10-14 18:00:04 +02:00