Stephen Hemminger
9f59365374
nf_nat: use secure_ipv4_port_ephemeral() for NAT port randomization ...
Use incoming network tuple as seed for NAT port randomization.
This avoids concerns of leaking net_random() bits, and also gives better
port distribution. Don't have NAT server, compile tested only.
Signed-off-by: Stephen Hemminger <shemminger@vyatta.com>
[ added missing EXPORT_SYMBOL_GPL ]
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2008-08-18 21:32:32 -07:00
2008-08-01 12:46:41 -07:00
2008-08-05 14:36:57 +02:00
2008-07-30 16:33:05 -07:00
2008-08-01 11:52:39 -07:00
2008-08-06 12:30:04 +02:00
2008-08-07 22:26:56 +02:00
2008-08-05 18:17:02 +02:00
2008-08-18 21:32:32 -07:00
2008-08-08 16:00:48 -04:00
2008-08-12 16:07:28 -07:00
2008-08-13 22:02:26 +10:00
2008-08-08 11:38:42 -07:00
2008-08-06 12:03:43 -07:00
2008-08-12 16:07:31 -07:00
2008-08-01 12:46:41 -07:00
2008-08-10 22:56:16 +02:00
2008-08-13 17:32:56 -07:00
2008-08-07 09:55:48 +01:00
2008-08-12 13:52:54 -07:00
2008-08-13 20:48:25 -07:00
2008-08-02 16:40:37 +02:00
2008-08-07 09:55:48 +01:00
2008-08-12 17:52:53 +10:00
2008-08-05 18:16:58 +02:00
2008-08-01 11:56:07 -07:00
2008-08-08 19:18:18 +01:00
2008-08-10 23:32:07 +02:00
2008-08-12 16:07:29 -07:00
2008-08-10 23:30:34 +02:00
2008-08-10 23:30:34 +02:00
2008-08-18 21:15:44 -07:00
2008-08-07 17:47:37 -07:00
2008-08-07 09:55:48 +01:00
2008-08-01 12:46:41 -07:00
2008-08-07 09:55:48 +01:00
2008-08-12 16:07:28 -07:00
2008-08-01 16:39:36 +02:00
2008-08-11 14:30:53 -07:00
2008-08-11 12:20:31 -07:00
2008-08-13 20:48:25 -07:00
2008-08-04 12:51:06 +09:00
2008-08-07 09:55:48 +01:00
2008-08-18 11:05:13 -04:00
2008-08-13 17:33:01 -07:00
2008-08-12 16:07:29 -07:00
2008-08-12 16:07:31 -07:00
2008-08-13 17:33:00 -07:00
9f59365374