Martin Topholm a6441b7a39 netfilter: synproxy: send mss option to backend ... When the synproxy_parse_options is called on the client ack the mss option will not be present. Consequently mss wont be included in the backend syn packet, which falls back to 536 bytes mss. Therefore XT_SYNPROXY_OPT_MSS is explicitly flagged when recovering mss value from cookie. Signed-off-by: Martin Topholm <mph@one.com> Reviewed-by: Jesper Dangaard Brouer <brouer@redhat.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2013-11-18 12:53:36 +01:00
..
Kconfig	netfilter: nf_tables: Add support for IPv6 NAT	2013-10-14 18:00:58 +02:00
Makefile	netfilter: nf_tables: Add support for IPv6 NAT	2013-10-14 18:00:58 +02:00
ip6_tables.c	netfilter: x_tables: fix ordering of jumpstack allocation and table update	2013-10-22 10:11:29 +02:00
ip6t_MASQUERADE.c	netfilter: nf_conntrack: don't send destroy events from iterator	2013-08-09 12:03:33 +02:00
ip6t_NPT.c	Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net	2013-04-07 18:37:01 -04:00
ip6t_REJECT.c	netfilter: ip6t_REJECT: skip checksum verification for outgoing ipv6 packets	2013-10-23 11:20:00 +02:00
ip6t_SYNPROXY.c	netfilter: synproxy: send mss option to backend	2013-11-18 12:53:36 +01:00
ip6t_ah.c	netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()	2012-05-09 12:53:47 +02:00
ip6t_eui64.c	netfilter: xtables: change hotdrop pointer to direct modification	2010-05-11 18:35:27 +02:00
ip6t_frag.c	netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()	2012-05-09 12:53:47 +02:00
ip6t_hbh.c	netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()	2012-05-09 12:53:47 +02:00
ip6t_ipv6header.c	netfilter: xtables: deconstify struct xt_action_param for matches	2010-05-11 18:33:37 +02:00
ip6t_mh.c	netfilter: xtables: change hotdrop pointer to direct modification	2010-05-11 18:35:27 +02:00
ip6t_rpfilter.c	netfilter: xt_rpfilter: skip locally generated broadcast/multicast, too	2013-04-19 00:11:59 +02:00
ip6t_rt.c	netfilter: ip6_tables: add flags parameter to ipv6_find_hdr()	2012-05-09 12:53:47 +02:00
ip6table_filter.c	netfilter: pass hook ops to hookfn	2013-10-14 11:29:31 +02:00
ip6table_mangle.c	netfilter: pass hook ops to hookfn	2013-10-14 11:29:31 +02:00
ip6table_nat.c	netfilter: pass hook ops to hookfn	2013-10-14 11:29:31 +02:00
ip6table_raw.c	netfilter: pass hook ops to hookfn	2013-10-14 11:29:31 +02:00
ip6table_security.c	netfilter: pass hook ops to hookfn	2013-10-14 11:29:31 +02:00
nf_conntrack_l3proto_ipv6.c	netfilter: push reasm skb through instead of original frag skbs	2013-11-11 00:19:35 -05:00
nf_conntrack_proto_icmpv6.c	netfilter: nf_log: prepare net namespace support for loggers	2013-04-05 20:12:54 +02:00
nf_conntrack_reasm.c	netfilter: push reasm skb through instead of original frag skbs	2013-11-11 00:19:35 -05:00
nf_defrag_ipv6_hooks.c	netfilter: push reasm skb through instead of original frag skbs	2013-11-11 00:19:35 -05:00
nf_nat_l3proto_ipv6.c	netfilter: ipv6: using csum_ipv6_magic requires net/ip6_checksum.h	2012-09-05 17:46:06 -04:00
nf_nat_proto_icmpv6.c	netfilter: nf_nat_proto_icmpv6:: fix wrong comparison in icmpv6_manip_pkt	2013-09-13 11:58:48 +02:00
nf_tables_ipv6.c	netfilter: nf_tables: complete net namespace support	2013-10-14 18:00:59 +02:00
nft_chain_nat_ipv6.c	netfilter: nf_tables: Add support for IPv6 NAT	2013-10-14 18:00:58 +02:00
nft_chain_route_ipv6.c	netfilter: nf_tables: add compatibility layer for x_tables	2013-10-14 18:00:04 +02:00