Yasuyuki Kozakai 8ca31ce52a netfilter: ip6t_{hbh,dst}: Rejects not-strict mode on rule insertion ...

The current code ignores rules for internal options in HBH/DST options
header in packet processing if 'Not strict' mode is specified (which is not
implemented). Clearly it is not expected by user.

Kernel should reject HBH/DST rule insertion with 'Not strict' mode
in the first place.

Signed-off-by: Yasuyuki Kozakai <yasuyuki.kozakai@toshiba.co.jp>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>

2008-09-24 15:53:39 -07:00

..

ip6_queue.c

netns: Use net_eq() to compare net-namespaces for optimization.

2008-07-19 22:34:43 -07:00

ip6_tables.c

[NETFILTER]: {ip,ip6,arp}_tables: return EAGAIN for invalid SO_GET_ENTRIES size

2008-04-14 11:15:45 +02:00

ip6t_ah.c

[NETFILTER]: Update modules' descriptions

2008-01-28 15:02:26 -08:00

ip6t_eui64.c

[NETFILTER]: Update modules' descriptions

2008-01-28 15:02:26 -08:00

ip6t_frag.c

[NETFILTER]: Update modules' descriptions

2008-01-28 15:02:26 -08:00

ip6t_hbh.c

netfilter: ip6t_{hbh,dst}: Rejects not-strict mode on rule insertion

2008-09-24 15:53:39 -07:00

ip6t_hl.c

[NETFILTER]: Update modules' descriptions

2008-01-28 15:02:26 -08:00

ip6t_HL.c

[NETFILTER]: Update modules' descriptions

2008-01-28 15:02:26 -08:00

ip6t_ipv6header.c

[NETFILTER]: annotate xtables targets with const and remove casts

2008-04-14 09:56:05 +02:00

ip6t_LOG.c

[NETFILTER]: {ip,ip6}t_LOG: print MARK value in log output

2008-04-14 09:56:01 +02:00

ip6t_mh.c

[NETFILTER]: Update modules' descriptions

2008-01-28 15:02:26 -08:00

ip6t_REJECT.c

[NETFILTER]: annotate xtables targets with const and remove casts

2008-04-14 09:56:05 +02:00

ip6t_rt.c

[NETFILTER]: annotate xtables targets with const and remove casts

2008-04-14 09:56:05 +02:00

ip6table_filter.c

netfilter: ip6table_filter in netns for real

2008-07-08 02:36:18 -07:00

ip6table_mangle.c

netfilter: ip6table_mangle: don't reroute in LOCAL_IN

2008-06-24 13:30:45 -07:00

ip6table_raw.c

[NETFILTER]: Use non-deprecated __RW_LOCK_UNLOCKED macro

2008-04-14 09:56:03 +02:00

ip6table_security.c

netfilter: ip{,6}tables_security: fix future section mismatch

2008-07-26 17:48:38 -07:00

Kconfig

netfilter: make security table depend on NETFILTER_ADVANCED

2008-07-23 16:42:42 -07:00

Makefile

netfilter: ip6_tables: add ip6tables security table

2008-06-09 15:58:05 -07:00

nf_conntrack_l3proto_ipv6.c

[NETFILTER]: nf_conntrack: use bool type in struct nf_conntrack_l3proto

2008-04-14 11:15:52 +02:00

nf_conntrack_proto_icmpv6.c

netfilter: nf_conntrack: properly account terminating packets

2008-06-09 15:59:40 -07:00

nf_conntrack_reasm.c

net: convert BUG_TRAP to generic WARN_ON

2008-07-25 21:43:18 -07:00