Florian Westphal f6b8767228 psd: add basic validation of userspace matchinfo data ...

psd multiplies weight_thresh by HZ, so it could overflow.

Userspace libxt_psd refuses values exceeding PSD_MAX_RATE, so check
that on kernel side, too.

Also, setting 0 weight for both privileged and highports will cause
psd to never match at all.

Reject 0 weight threshold, too because it makes no sense (triggers
match for every initial packet).

2012-06-15 15:11:32 +02:00

..

ACCOUNT

Remove unused Kconfig files

2012-03-14 01:32:33 +01:00

pknock

Remove unused Kconfig files

2012-03-14 01:32:33 +01:00

.gitignore

build: stash away build tools and update .gitignore

2012-01-04 21:45:45 +01:00

compat_nfinetaddr.h

Add a compat wrapper to make modules work with older Linux.

2008-01-29 15:40:57 +01:00

compat_rawpost.h

RAWNAT: add the rawpost tables for IPv4/IPv6

2009-04-11 00:35:58 +02:00

compat_skbuff.h

Rename skb->iif to skb->skb_iif for 2.6.32+

2009-12-31 16:15:53 +01:00

compat_user.h

build: add workaround for broken linux-glibc-devel 2.6.34 userspace headers

2010-09-23 02:37:45 +02:00

compat_xtables.c

compat_xtables: fixed mistranslation of checkentry return values

2012-01-12 09:21:39 +01:00

compat_xtables.h

build: additional compilation fixes for Linux 3.2/3.3

2012-01-04 21:45:43 +01:00

compat_xtnu.h

compat_xtables: move to 2.6.35 xt_action_param (3/3)

2010-05-13 19:45:56 +02:00

ip6table_rawpost.c

RAWNAT: make iptable_rawpost compile with 2.6.30-rc5

2009-05-15 18:35:53 +02:00

iptable_rawpost.c

RAWNAT: make iptable_rawpost compile with 2.6.30-rc5

2009-05-15 18:35:53 +02:00

Kbuild

build: limit xt_ECHO to kernel 3.x

2012-04-21 02:44:51 +02:00

libxt_CHAOS.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_CHAOS.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_CHECKSUM.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_CHECKSUM.man

xt_CHECKSUM: initial import

2010-07-11 17:54:54 +02:00

libxt_condition.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_condition.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_DELUDE.c

build: add workaround for broken linux-glibc-devel 2.6.34 userspace headers

2010-09-23 02:37:45 +02:00

libxt_DELUDE.man

Import Chaostables extensions

2008-02-21 18:56:21 +01:00

libxt_dhcpmac.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_DHCPMAC.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_dhcpmac.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_DHCPMAC.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_DNETMAP.c

DNETMAP version 2

2012-06-10 22:27:28 +02:00

libxt_DNETMAP.man

all: remove trailing squatspaces

2012-06-10 22:31:10 +02:00

libxt_ECHO.c

build: add workaround for broken linux-glibc-devel 2.6.34 userspace headers

2010-09-23 02:37:45 +02:00

libxt_ECHO.man

doc: add manpages for xt_ECHO and xt_TEE

2008-11-24 17:42:32 +01:00

libxt_fuzzy.c

all: remove trailing squatspaces

2012-06-10 22:31:10 +02:00

libxt_fuzzy.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_geoip.c

all: remove trailing squatspaces

2012-06-10 22:31:10 +02:00

libxt_geoip.man

libxt_geoip: update manual page with new tool syntax

2011-02-02 04:51:38 +01:00

libxt_gradm.c

all: remove trailing squatspaces

2012-06-10 22:31:10 +02:00

libxt_gradm.man

libxt_gradm: match packets based on status of grsecurity RBAC

2010-10-29 14:54:06 +02:00

libxt_iface.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_iface.man

xt_iface: allow matching against incoming/outgoing interface

2010-10-31 01:53:23 +02:00

libxt_IPMARK.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_IPMARK.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_ipp2p.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_ipp2p.man

all: remove trailing squatspaces

2012-06-10 22:31:10 +02:00

libxt_ipv4options.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_ipv4options.man

doc: fix \(em in ipv4options

2011-05-31 23:00:35 +02:00

libxt_length2.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_length2.man

libxt_length: fix name of manpage file

2011-01-15 05:23:38 +01:00

libxt_LOGMARK.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_LOGMARK.man

LOGMARK: remove non-existent options from manpage

2009-10-24 01:14:20 +02:00

libxt_lscan.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_lscan.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_psd.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_psd.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_quota2.c

build: preliminary support for iptables 1.4.11

2011-02-02 05:09:58 +01:00

libxt_quota2.man

quota2: add a no-change mode

2009-12-31 16:24:47 +01:00

libxt_RAWDNAT.c

src: use xtables_register_targets throughout

2011-11-02 00:26:23 +01:00

libxt_RAWDNAT.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_RAWSNAT.c

src: use xtables_register_targets throughout

2011-11-02 00:26:23 +01:00

libxt_RAWSNAT.man

doc: properly escape non-hyphens

2009-10-03 21:41:29 +02:00

libxt_STEAL.c

build: add workaround for broken linux-glibc-devel 2.6.34 userspace headers

2010-09-23 02:37:45 +02:00

libxt_STEAL.man

Add the "STEAL" target from the "demos" branch

2009-03-25 19:54:25 +01:00

libxt_SYSRQ.c

build: add workaround for broken linux-glibc-devel 2.6.34 userspace headers

2010-09-23 02:37:45 +02:00

libxt_SYSRQ.man

doc: do not advertise old tools

2011-06-25 00:05:26 +02:00

libxt_TARPIT.c

xt_TARPIT: honeypot and reset modes

2011-05-31 22:41:51 +02:00

libxt_TARPIT.man

doc: remove stray "userspace" wording

2011-06-01 01:44:54 +02:00

libxt_TEE.c

src: use xtables_register_targets throughout

2011-11-02 00:26:23 +01:00

libxt_TEE.man

doc: add example usage to libxt_TEE.man

2009-11-25 11:46:39 +01:00

mac.c

Upgrade to iptables 1.4.3 API

2009-03-19 11:05:26 +01:00

Makefile.am

build: use AM_CPPFLAGS

2010-12-30 08:36:15 +01:00

Mbuild

src: remove ipset6-genl

2012-04-05 06:58:46 +02:00

xt_CHAOS.c

build: add missing linux/version.h includes where needed

2011-08-28 19:45:39 +02:00

xt_CHAOS.h

Import Chaostables extensions

2008-02-21 18:56:21 +01:00

xt_CHECKSUM.c

build: add missing linux/version.h includes where needed

2011-08-28 19:45:39 +02:00

xt_CHECKSUM.h

xt_CHECKSUM: only use __u* in public header files

2010-07-15 12:21:16 +02:00

xt_condition.c

compat_xtables: move to 2.6.35 xt_action_param (2/3)

2010-05-13 19:45:52 +02:00

xt_condition.h

condition: greatly improve processing speed

2008-04-08 11:58:35 +02:00

xt_DELUDE.c

build: add missing linux/version.h includes where needed

2011-08-28 19:45:39 +02:00

xt_DHCPMAC.c

compat_xtables: move to 2.6.35 xt_action_param (2/3)

2010-05-13 19:45:52 +02:00

xt_DHCPMAC.h

dhcpmac: rename from dhcpaddr

2009-03-26 21:55:10 +01:00

xt_DNETMAP.c

all: remove trailing squatspaces

2012-06-10 22:31:10 +02:00

xt_DNETMAP.h

DNETMAP version 2

2012-06-10 22:27:28 +02:00

xt_ECHO.c

build: support for Linux 3.3

2012-04-05 06:58:43 +02:00

xt_fuzzy.c

compat_xtables: move to 2.6.35 xt_action_param (2/3)

2010-05-13 19:45:52 +02:00

xt_fuzzy.h

fuzzy: import 20050627 code base

2008-09-01 15:22:16 -04:00

xt_geoip.c

xt_geoip: avoid recursive function calls

2011-04-14 09:07:25 +02:00

xt_geoip.h

xt_geoip: IPv6 support

2011-02-02 04:47:28 +01:00

xt_gradm.h

libxt_gradm: match packets based on status of grsecurity RBAC

2010-10-29 14:54:06 +02:00

xt_iface.c

build: add missing linux/version.h includes where needed

2011-08-28 19:45:39 +02:00

xt_iface.h

xt_iface: allow matching against incoming/outgoing interface

2010-10-31 01:53:23 +02:00

xt_IPMARK.c

compat_xtables: move to 2.6.35 xt_action_param (1/3)

2010-05-13 19:28:37 +02:00

xt_IPMARK.h

IPMARK: IPv6 support

2008-04-09 19:24:01 +02:00

xt_ipp2p.c

xt_ipp2p: support UDPLITE

2011-08-16 14:50:53 +02:00

xt_ipp2p.h

ipp2p: version bump

2009-01-30 06:02:10 +01:00

xt_ipv4options.c

xt_ipv4options: fix an infinite loop

2011-11-05 15:31:00 +01:00

xt_ipv4options.h

Add a reworked IPv4 options match - xt_ipv4options

2009-03-08 23:38:12 +01:00

xt_length2.c

extensions: more precise description

2011-07-17 14:27:07 +02:00

xt_length2.h

Add xt_length2

2009-01-30 06:01:12 +01:00

xt_LOGMARK.c

build: add missing linux/version.h includes where needed

2011-08-28 19:45:39 +02:00

xt_LOGMARK.h

xt_LOGMARK: dump CLASSIFY mark, ctstate and ctstatus

2008-02-20 23:17:55 +01:00

xt_lscan.c

extensions: more precise description

2011-07-17 14:27:07 +02:00

xt_lscan.h

xt_lscan: rename from xt_portscan

2009-03-05 01:43:29 +01:00

xt_psd.c

psd: add basic validation of userspace matchinfo data

2012-06-15 15:11:32 +02:00

xt_psd.h

psd: use fixated types in info struct

2009-08-13 00:52:46 +02:00

xt_quota2.c

all: remove trailing squatspaces

2012-06-10 22:31:10 +02:00

xt_quota2.h

quota2: add a no-change mode

2009-12-31 16:24:47 +01:00

xt_RAWNAT.c

build: add missing linux/version.h includes where needed

2011-08-28 19:45:39 +02:00

xt_RAWNAT.h

RAWNAT: add extension's kernel and userspace modules

2009-04-26 21:44:54 +02:00

xt_STEAL.c

build: additional compilation fixes for Linux 3.2/3.3

2012-01-04 21:45:43 +01:00

xt_SYSRQ.c

xt_SYSRQ: fix compile error when crypto is turned off

2012-01-20 21:19:13 +01:00

xt_TARPIT.c

build: add missing linux/version.h includes where needed

2011-08-28 19:45:39 +02:00

xt_TARPIT.h

xt_TARPIT: honeypot and reset modes

2011-05-31 22:41:51 +02:00

xt_TEE.c

xt_TEE: abort build when the feature is already provided by mainline

2011-07-28 13:50:38 +02:00

xt_TEE.h

Initial commit.

2008-01-29 03:57:08 +01:00