OpenCloudOS-Kernel/include/linux/netfilter
Jorge Boncompte c2a1910b06 [NETFILTER]: nf_nat_proto_gre: do not modify/corrupt GREv0 packets through NAT
While porting some changes of the 2.6.21-rc7 pptp/proto_gre conntrack
and nat modules to a 2.4.32 kernel I noticed that the gre_key function
returns a wrong pointer to the GRE key of a version 0 packet thus
corrupting the packet payload.

The intended behaviour for GREv0 packets is to act like
nf_conntrack_proto_generic/nf_nat_proto_unknown so I have ripped the
offending functions (not used anymore) and modified the
nf_nat_proto_gre modules to not touch version 0 (non PPTP) packets.

Signed-off-by: Jorge Boncompte <jorge@dti2.net>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-05-03 03:34:42 -07:00
..
Kbuild [NETFILTER]: add IPv6-capable TCPMSS target 2007-02-08 12:39:16 -08:00
nf_conntrack_amanda.h [NETFILTER]: nf_conntrack/nf_nat: add amanda helper port 2006-12-02 22:08:26 -08:00
nf_conntrack_common.h [NETFILTER]: conntrack: introduce connection mark event 2006-09-22 14:55:24 -07:00
nf_conntrack_ftp.h [NETFILTER]: nf_nat: add FTP NAT helper port 2006-12-02 22:07:44 -08:00
nf_conntrack_h323.h [NETFILTER]: nf_conntrack/nf_nat: add H.323 helper port 2006-12-02 22:08:46 -08:00
nf_conntrack_h323_asn1.h [NETFILTER]: nf_conntrack/nf_nat: add H.323 helper port 2006-12-02 22:08:46 -08:00
nf_conntrack_h323_types.h [NETFILTER]: nf_conntrack/nf_nat: add H.323 helper port 2006-12-02 22:08:46 -08:00
nf_conntrack_irc.h [NETFILTER]: nf_conntrack/nf_nat: add IRC helper port 2006-12-02 22:09:06 -08:00
nf_conntrack_pptp.h [NETFILTER]: nf_conntrack: fix warning in PPTP helper 2006-12-06 18:39:04 -08:00
nf_conntrack_proto_gre.h [NETFILTER]: nf_nat_proto_gre: do not modify/corrupt GREv0 packets through NAT 2007-05-03 03:34:42 -07:00
nf_conntrack_sane.h [NETFILTER]: Add SANE connection tracking helper 2007-02-08 12:39:09 -08:00
nf_conntrack_sctp.h [SCTP]: Netfilter sctp annotations. 2006-12-02 21:27:12 -08:00
nf_conntrack_sip.h [NETFILTER]: nf_conntrack/nf_nat: add SIP helper port 2006-12-02 22:09:57 -08:00
nf_conntrack_tcp.h [NETFILTER]: ctnetlink: add support for internal tcp connection tracking flags handling 2007-04-25 22:25:57 -07:00
nf_conntrack_tftp.h [NETFILTER]: nf_conntrack/nf_nat: add TFTP helper port 2006-12-02 22:10:18 -08:00
nf_conntrack_tuple_common.h
nfnetlink.h [NETLINK]: Remove error pointer from netlink message handler 2007-04-25 22:27:30 -07:00
nfnetlink_conntrack.h [NETFILTER]: ctnetlink: add support for internal tcp connection tracking flags handling 2007-04-25 22:25:57 -07:00
nfnetlink_log.h [NETFILTER]: nfnetlink_log: remove useless prefix length limitation 2006-12-02 21:31:30 -08:00
nfnetlink_queue.h [NETFILTER]: nfnetlink_queue: allow changing queue length through netlink 2006-12-02 21:31:29 -08:00
x_tables.h [NETFILTER]: ip6_tables: fixed conflicted optname for getsockopt 2006-11-15 21:18:49 -08:00
xt_CLASSIFY.h
xt_CONNMARK.h
xt_CONNSECMARK.h
xt_DSCP.h [NETFILTER]: x_tables: replace IPv4 DSCP target by address family independent version 2006-09-22 14:55:22 -07:00
xt_MARK.h
xt_NFLOG.h [NETFILTER]: x_tables: add NFLOG target 2006-12-02 21:31:31 -08:00
xt_NFQUEUE.h
xt_SECMARK.h
xt_TCPMSS.h [NETFILTER]: add IPv6-capable TCPMSS target 2007-02-08 12:39:16 -08:00
xt_comment.h
xt_connbytes.h
xt_connmark.h
xt_conntrack.h [NETFILTER]: trivial annotations 2006-12-02 21:21:25 -08:00
xt_dccp.h
xt_dscp.h [NETFILTER]: x_tables: replace IPv4 dscp match by address family independent version 2006-09-22 14:55:21 -07:00
xt_esp.h
xt_hashlimit.h [NETFILTER]: x_tables: add port of hashlimit match for IPv4 and IPv6 2006-12-02 21:31:31 -08:00
xt_helper.h
xt_length.h
xt_limit.h
xt_mac.h
xt_mark.h
xt_multiport.h
xt_physdev.h
xt_pkttype.h
xt_policy.h [NETFILTER]: trivial annotations 2006-12-02 21:21:25 -08:00
xt_quota.h
xt_realm.h
xt_sctp.h
xt_state.h
xt_statistic.h
xt_string.h
xt_tcpmss.h
xt_tcpudp.h