linux-dev - Linux kernel development work

Age	Commit message (Collapse)	Author	Files	Lines
2010-10-21	tproxy: added IPv6 socket lookup function to nf_tproxy_core	Balazs Scheidler	1	-1/+71
	Signed-off-by: Balazs Scheidler <bazsi@balabit.hu> Signed-off-by: KOVACS Krisztian <hidden@balabit.hu> Signed-off-by: Patrick McHardy <kaber@trash.net>
2010-10-21	tproxy: add lookup type checks for UDP in nf_tproxy_get_sock_v4()	Balazs Scheidler	1	-2/+114
	Also, inline this function as the lookup_type is always a literal and inlining removes branches performed at runtime. Signed-off-by: Balazs Scheidler <bazsi@balabit.hu> Signed-off-by: KOVACS Krisztian <hidden@balabit.hu> Signed-off-by: Patrick McHardy <kaber@trash.net>
2010-10-21	tproxy: kick out TIME_WAIT sockets in case a new connection comes in with the same tuple	Balazs Scheidler	1	-1/+5
	Without tproxy redirections an incoming SYN kicks out conflicting TIME_WAIT sockets, in order to handle clients that reuse ports within the TIME_WAIT period. The same mechanism didn't work in case TProxy is involved in finding the proper socket, as the time_wait processing code looked up the listening socket assuming that the listener addr/port matches those of the established connection. This is not the case with TProxy as the listener addr/port is possibly changed with the tproxy rule. Signed-off-by: Balazs Scheidler <bazsi@balabit.hu> Signed-off-by: KOVACS Krisztian <hidden@balabit.hu> Signed-off-by: Patrick McHardy <kaber@trash.net>
2008-10-08	netfilter: iptables tproxy core	KOVACS Krisztian	1	-0/+32
	The iptables tproxy core is a module that contains the common routines used by various tproxy related modules (TPROXY target and socket match) Signed-off-by: KOVACS Krisztian <hidden@sch.bme.hu> Signed-off-by: Patrick McHardy <kaber@trash.net>