pm24.git/net/netfilter/nft_synproxy.c, branch v5.14

netfilter: nf_tables: add and use nft_thoff helper

2021-05-28T23:04:54Z

This allows to change storage placement later on without changing readers. Signed-off-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso

netfilter: Add MODULE_DESCRIPTION entries to kernel modules

2020-06-24T22:50:31Z

The user tool modinfo is used to get information on kernel modules, including a description where it is available. This patch adds a brief MODULE_DESCRIPTION to netfilter kernel modules (descriptions taken from Kconfig file or code comments) Signed-off-by: Rob Gill Signed-off-by: Pablo Neira Ayuso

netfilter: nft_synproxy: add synproxy stateful object support

2019-09-10T20:35:37Z

Register a new synproxy stateful object type into the stateful object infrastructure. Signed-off-by: Fernando Fernandez Mancera Signed-off-by: Pablo Neira Ayuso

netfilter: synproxy: rename mss synproxy_options field

2019-08-03T16:39:08Z

After introduce "mss_encode" field in the synproxy_options struct the field "mss" is a little confusing. It has been renamed to "mss_option". Signed-off-by: Fernando Fernandez Mancera Signed-off-by: Pablo Neira Ayuso

netfilter: synproxy: fix erroneous tcp mss option

2019-07-16T11:17:01Z

Now synproxy sends the mss value set by the user on client syn-ack packet instead of the mss value that client announced. Fixes: 48b1de4c110a ("netfilter: add SYNPROXY core/target") Signed-off-by: Fernando Fernandez Mancera Signed-off-by: Pablo Neira Ayuso

netfilter: nf_tables: Add synproxy support

2019-07-05T19:34:23Z

Add synproxy support for nf_tables. This behaves like the iptables synproxy target but it is structured in a way that allows us to propose improvements in the future. Signed-off-by: Fernando Fernandez Mancera Signed-off-by: Pablo Neira Ayuso