Dmitry Popov b70905e7cb xt_RAWNAT: skb writable part might not include whole L4 header (IPv4 case) ...

Consider TCP/IPv4 packet with IP options: sizeof(*iph) + sizeof(struct
tcphdr) is not enough to include tcp checksum. It may hurt if this
packet is fragmented.

Therefore, we should use iph->ihl * 4 instead of sizeof(*iph).

Signed-off-by: Dmitry Popov <dp@highloadlab.com>

2013-05-08 13:21:54 +02:00

..

ACCOUNT

iptaccount: fix being a no-op program

2013-03-31 21:11:24 +02:00

pknock

build: remove support for Linux 2.6.23

2012-10-16 04:16:56 +02:00

.gitignore

build: stash away build tools and update .gitignore

2012-01-04 21:45:45 +01:00

compat_nfinetaddr.h

Add a compat wrapper to make modules work with older Linux.

2008-01-29 15:40:57 +01:00

compat_rawpost.h

build: remove support for Linux 2.6.23

2012-10-16 04:16:56 +02:00

compat_skbuff.h

build: remove support for Linux 2.6.32

2012-11-12 18:29:53 +01:00

compat_user.h

build: add workaround for broken linux-glibc-devel 2.6.34 userspace headers

2010-09-23 02:37:45 +02:00

compat_xtables.c

Merge branch 'maint' into newage

2012-11-12 19:01:31 +01:00

compat_xtables.h

build: remove support for Linux 3.6 / switch xt_DNETMAP to nf_nat

2012-11-12 18:42:11 +01:00

compat_xtnu.h

build: remove support for Linux 2.6.34

2012-11-12 18:30:08 +01:00

ip6table_rawpost.c

Merge branch 'maint' into newage

2012-11-12 19:01:31 +01:00

iptable_rawpost.c

Merge branch 'maint' into newage

2012-11-12 19:01:31 +01:00

Kbuild

xt_CHECKSUM: remove the module

2012-11-12 18:30:20 +01:00

libxt_CHAOS.c

Update my email address

2012-11-12 19:01:14 +01:00

libxt_CHAOS.man

Update my email address

2012-11-12 19:01:14 +01:00

libxt_condition.c

Update my email address

2012-11-12 19:01:14 +01:00

libxt_condition.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_DELUDE.c

Update my email address

2012-11-12 19:01:14 +01:00

libxt_DELUDE.man

Import Chaostables extensions

2008-02-21 18:56:21 +01:00

libxt_dhcpmac.c

Update my email address

2012-11-12 19:01:14 +01:00

libxt_DHCPMAC.c

Update my email address

2012-11-12 19:01:14 +01:00

libxt_dhcpmac.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_DHCPMAC.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_DNETMAP.c

build: remove support for Linux 3.6 / switch xt_DNETMAP to nf_nat

2012-11-12 18:42:11 +01:00

libxt_DNETMAP.man

all: remove trailing squatspaces

2012-06-10 22:31:10 +02:00

libxt_ECHO.c

Update my email address

2012-11-12 19:01:14 +01:00

libxt_ECHO.man

doc: add manpages for xt_ECHO and xt_TEE

2008-11-24 17:42:32 +01:00

libxt_fuzzy.c

all: remove trailing squatspaces

2012-06-10 22:31:10 +02:00

libxt_fuzzy.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_geoip.c

Update my email address

2012-11-12 19:01:14 +01:00

libxt_geoip.man

libxt_geoip: update manual page with new tool syntax

2011-02-02 04:51:38 +01:00

libxt_gradm.c

all: remove trailing squatspaces

2012-06-10 22:31:10 +02:00

libxt_gradm.man

libxt_gradm: match packets based on status of grsecurity RBAC

2010-10-29 14:54:06 +02:00

libxt_iface.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_iface.man

xt_iface: allow matching against incoming/outgoing interface

2010-10-31 01:53:23 +02:00

libxt_IPMARK.c

Update my email address

2012-11-12 19:01:14 +01:00

libxt_IPMARK.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_ipp2p.c

Update my email address

2012-11-12 19:01:14 +01:00

libxt_ipp2p.man

all: remove trailing squatspaces

2012-06-10 22:31:10 +02:00

libxt_ipv4options.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_ipv4options.man

doc: fix \(em in ipv4options

2011-05-31 23:00:35 +02:00

libxt_length2.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_length2.man

libxt_length: fix name of manpage file

2011-01-15 05:23:38 +01:00

libxt_LOGMARK.c

Update my email address

2012-11-12 19:01:14 +01:00

libxt_LOGMARK.man

LOGMARK: remove non-existent options from manpage

2009-10-24 01:14:20 +02:00

libxt_lscan.c

Update my email address

2012-11-12 19:01:14 +01:00

libxt_lscan.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_psd.c

xt_psd: add IPv6 support

2012-09-18 03:33:37 +02:00

libxt_psd.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_quota2.c

Update my email address

2012-11-12 19:01:14 +01:00

libxt_quota2.man

quota2: add a no-change mode

2009-12-31 16:24:47 +01:00

libxt_RAWDNAT.c

src: use xtables_register_targets throughout

2011-11-02 00:26:23 +01:00

libxt_RAWDNAT.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_RAWSNAT.c

src: use xtables_register_targets throughout

2011-11-02 00:26:23 +01:00

libxt_RAWSNAT.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_STEAL.c

build: add workaround for broken linux-glibc-devel 2.6.34 userspace headers

2010-09-23 02:37:45 +02:00

libxt_STEAL.man

Add the "STEAL" target from the "demos" branch

2009-03-25 19:54:25 +01:00

libxt_SYSRQ.c

build: add workaround for broken linux-glibc-devel 2.6.34 userspace headers

2010-09-23 02:37:45 +02:00

libxt_SYSRQ.man

doc: update xt_SYSRQ.man to reflect that the full IPv6 address is needed

2012-08-23 15:27:23 +02:00

libxt_TARPIT.c

TARPIT: enable IPv6 userspace support

2012-07-09 18:57:41 +02:00

libxt_TARPIT.man

doc: remove stray "userspace" wording

2011-06-01 01:44:54 +02:00

mac.c

Upgrade to iptables 1.4.3 API

2009-03-19 11:05:26 +01:00

Makefile.am

build: use AM_CPPFLAGS

2010-12-30 08:36:15 +01:00

Mbuild

xt_CHECKSUM: remove the module

2012-11-12 18:30:20 +01:00

xt_CHAOS.c

Merge branch 'maint' into newage

2012-11-12 19:01:31 +01:00

xt_CHAOS.h

Import Chaostables extensions

2008-02-21 18:56:21 +01:00

xt_condition.c

Merge branch 'maint' into newage

2012-11-12 19:01:31 +01:00

xt_condition.h

condition: greatly improve processing speed

2008-04-08 11:58:35 +02:00

xt_DELUDE.c

DELUDE: update comment about reentrancy

2013-03-31 21:11:25 +02:00

xt_DHCPMAC.c

Update my email address

2012-11-12 19:01:14 +01:00

xt_DHCPMAC.h

dhcpmac: rename from dhcpaddr

2009-03-26 21:55:10 +01:00

xt_DNETMAP.c

build: support for Linux 3.9

2013-03-07 22:56:27 +01:00

xt_DNETMAP.h

build: remove support for Linux 3.6 / switch xt_DNETMAP to nf_nat

2012-11-12 18:42:11 +01:00

xt_ECHO.c

Merge branch 'maint' into newage

2012-11-12 19:01:31 +01:00

xt_fuzzy.c

compat_xtables: move to 2.6.35 xt_action_param (2/3)

2010-05-13 19:45:52 +02:00

xt_fuzzy.h

fuzzy: import 20050627 code base

2008-09-01 15:22:16 -04:00

xt_geoip.c

xt_geoip: avoid recursive function calls

2011-04-14 09:07:25 +02:00

xt_geoip.h

xt_geoip: IPv6 support

2011-02-02 04:47:28 +01:00

xt_gradm.h

libxt_gradm: match packets based on status of grsecurity RBAC

2010-10-29 14:54:06 +02:00

xt_iface.c

build: remove support for Linux 2.6.23

2012-10-16 04:16:56 +02:00

xt_iface.h

xt_iface: allow matching against incoming/outgoing interface

2010-10-31 01:53:23 +02:00

xt_IPMARK.c

Update my email address

2012-11-12 19:01:14 +01:00

xt_IPMARK.h

IPMARK: IPv6 support

2008-04-09 19:24:01 +02:00

xt_ipp2p.c

xt_ipp2p: support UDPLITE

2011-08-16 14:50:53 +02:00

xt_ipp2p.h

ipp2p: version bump

2009-01-30 06:02:10 +01:00

xt_ipv4options.c

Update my email address

2012-11-12 19:01:14 +01:00

xt_ipv4options.h

Add a reworked IPv4 options match - xt_ipv4options

2009-03-08 23:38:12 +01:00

xt_length2.c

Update my email address

2012-11-12 19:01:14 +01:00

xt_length2.h

Add xt_length2

2009-01-30 06:01:12 +01:00

xt_LOGMARK.c

Merge branch 'maint' into newage

2012-11-12 19:01:31 +01:00

xt_LOGMARK.h

xt_LOGMARK: dump CLASSIFY mark, ctstate and ctstatus

2008-02-20 23:17:55 +01:00

xt_lscan.c

Merge branch 'maint' into newage

2012-11-12 19:01:31 +01:00

xt_lscan.h

xt_lscan: rename from xt_portscan

2009-03-05 01:43:29 +01:00

xt_psd.c

build: resolve compiler error

2012-10-15 21:15:25 +02:00

xt_psd.h

psd: move defines to user/kernelspace part where possible

2012-06-15 15:17:30 +02:00

xt_quota2.c

Merge branch 'maint' into newage

2012-11-12 19:01:31 +01:00

xt_quota2.h

quota2: add a no-change mode

2009-12-31 16:24:47 +01:00

xt_RAWNAT.c

xt_RAWNAT: skb writable part might not include whole L4 header (IPv4 case)

2013-05-08 13:21:54 +02:00

xt_RAWNAT.h

RAWNAT: add extension's kernel and userspace modules

2009-04-26 21:44:54 +02:00

xt_STEAL.c

Update my email address

2012-11-12 19:01:14 +01:00

xt_SYSRQ.c

build: support for Linux 3.8

2012-12-27 07:59:34 +01:00

xt_TARPIT.c

Merge branch 'maint' into newage

2012-11-12 19:01:31 +01:00

xt_TARPIT.h

xt_TARPIT: honeypot and reset modes

2011-05-31 22:41:51 +02:00