Martin Topholm a6441b7a39 netfilter: synproxy: send mss option to backend ... When the synproxy_parse_options is called on the client ack the mss option will not be present. Consequently mss wont be included in the backend syn packet, which falls back to 536 bytes mss. Therefore XT_SYNPROXY_OPT_MSS is explicitly flagged when recovering mss value from cookie. Signed-off-by: Martin Topholm <mph@one.com> Reviewed-by: Jesper Dangaard Brouer <brouer@redhat.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>		2013-11-18 12:53:36 +01:00
..
arp_tables.c	netfilter: x_tables: fix ordering of jumpstack allocation and table update	2013-10-22 10:11:29 +02:00
arpt_mangle.c	netfilter: arpt_mangle: fix return values of checkentry	2011-02-01 16:03:46 +01:00
arptable_filter.c	netfilter: pass hook ops to hookfn	2013-10-14 11:29:31 +02:00
ip_tables.c	netfilter: x_tables: fix ordering of jumpstack allocation and table update	2013-10-22 10:11:29 +02:00
ipt_ah.c	netfilter: xtables: change hotdrop pointer to direct modification	2010-05-11 18:35:27 +02:00
ipt_CLUSTERIP.c	Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next	2013-11-04 19:46:58 -05:00
ipt_ECN.c	netfilter: xtables: substitute temporary defines by final name	2010-05-11 18:31:17 +02:00
ipt_MASQUERADE.c	netfilter: nf_conntrack: don't send destroy events from iterator	2013-08-09 12:03:33 +02:00
ipt_REJECT.c	netfilter: ip[6]t_REJECT: tcp-reset using wrong MAC source if bridged	2013-08-28 00:13:12 +02:00
ipt_rpfilter.c	netfilter: xt_rpfilter: skip locally generated broadcast/multicast, too	2013-04-19 00:11:59 +02:00
ipt_SYNPROXY.c	netfilter: synproxy: send mss option to backend	2013-11-18 12:53:36 +01:00
ipt_ULOG.c	netfilter: ipt_ULOG: fix info leaks	2013-10-02 17:28:36 +02:00
iptable_filter.c	netfilter: pass hook ops to hookfn	2013-10-14 11:29:31 +02:00
iptable_mangle.c	netfilter: pass hook ops to hookfn	2013-10-14 11:29:31 +02:00
iptable_nat.c	netfilter: pass hook ops to hookfn	2013-10-14 11:29:31 +02:00
iptable_raw.c	netfilter: pass hook ops to hookfn	2013-10-14 11:29:31 +02:00
iptable_security.c	netfilter: pass hook ops to hookfn	2013-10-14 11:29:31 +02:00
Kconfig	netfilter: nf_tables: add ARP filtering support	2013-10-14 18:01:03 +02:00
Makefile	netfilter: nf_tables: add ARP filtering support	2013-10-14 18:01:03 +02:00
nf_conntrack_l3proto_ipv4.c	netfilter: pass hook ops to hookfn	2013-10-14 11:29:31 +02:00
nf_conntrack_l3proto_ipv4_compat.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_conntrack_proto_icmp.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_defrag_ipv4.c	netfilter: pass hook ops to hookfn	2013-10-14 11:29:31 +02:00
nf_nat_h323.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_nat_l3proto_ipv4.c	netfilter: add protocol independent NAT core	2012-08-30 03:00:14 +02:00
nf_nat_pptp.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_nat_proto_gre.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_nat_proto_icmp.c	netfilter: add protocol independent NAT core	2012-08-30 03:00:14 +02:00
nf_nat_snmp_basic.c	netfilter: add my copyright statements	2013-04-18 20:27:55 +02:00
nf_tables_arp.c	netfilter: nf_tables: add ARP filtering support	2013-10-14 18:01:03 +02:00
nf_tables_ipv4.c	netfilter: nf_tables: remove duplicated include from nf_tables_ipv4.c	2013-11-03 22:36:25 +01:00
nft_chain_nat_ipv4.c	netfilter: nf_tables: Add support for IPv6 NAT	2013-10-14 18:00:58 +02:00
nft_chain_route_ipv4.c	netfilter: nf_tables: add compatibility layer for x_tables	2013-10-14 18:00:04 +02:00
nft_reject_ipv4.c	netfilter: nf_tables: expression ops overloading	2013-10-14 17:16:08 +02:00