linux/net/ipv4/netfilter, branch v2.6.13.2

[PATCH] Fix DHCP + MASQUERADE problem

2005-09-17T01:01:57Z

In 2.6.13-rcX the MASQUERADE target was changed not to exclude local packets for better source address consistency. This breaks DHCP clients using UDP sockets when the DHCP requests are caught by a MASQUERADE rule because the MASQUERADE target drops packets when no address is configured on the outgoing interface. This patch makes it ignore packets with a source address of 0. Thanks to Rusty for this suggestion. Signed-off-by: Patrick McHardy Signed-off-by: Chris Wright

[NETFILTER]: Fix HW checksum handling in ip_queue/ip6_queue

2005-08-23T17:10:35Z

The checksum needs to be filled in on output, after mangling a packet ip_summed needs to be reset. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: Fix HW checksum handling in TCPMSS target

2005-08-21T00:40:41Z

Most importantly, remove bogus BUG() in receive path. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: Fix HW checksum handling in ECN target

2005-08-21T00:39:15Z

Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: Fix ECN target TCP marking

2005-08-21T00:38:40Z

An incorrect check made it bail out before doing anything. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[PATCH] don't try to do any NAT on untracked connections

2005-08-08T18:48:28Z

With the introduction of 'rustynat' in 2.6.11, the old tricks of preventing NAT of 'untracked' connections (e.g. NOTRACK target in 'raw' table) are no longer sufficient. The ip_conntrack_untracked.status |= IPS_NAT_DONE_MASK effectively prevents iteration of the 'nat' table, but doesn't prevent nat_packet() to be executed. Since nr_manips is gone in 'rustynat', nat_packet() now implicitly thinks that it has to do NAT on the packet. This patch fixes that problem by explicitly checking for ip_conntrack_untracked in ip_nat_fn(). Signed-off-by: Harald Welte Signed-off-by: Linus Torvalds

[NETFILTER] Inherit masq_index to slave connections

2005-07-31T00:44:07Z

masq_index is used for cleanup in case the interface address changes (such as a dialup ppp link with dynamic addreses). Without this patch, slave connections are not evicted in such a case, since they don't inherit masq_index. Signed-off-by: Harald Welte Signed-off-by: David S. Miller

[NETFILTER]: Fix -Wunder error in ip_conntrack_core.c

2005-07-27T21:46:03Z

Signed-off-by: Nick Sillik Signed-off-by: David S. Miller

[NETFILTER]: Use correct byteorder in ICMP NAT

2005-07-22T19:51:38Z

Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller

[NETFILTER]: Wait until all references to ip_conntrack_untracked are dropped on unload

2005-07-22T19:51:03Z

Fixes a crash when unloading ip_conntrack. Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller