| 8bfcdf6671b1c8006c52c3eaf9fd1b5dfcf41c3d |
|
26-Oct-2014 |
Pablo Neira Ayuso <pablo@netfilter.org> |
netfilter: nf_reject_ipv6: split nf_send_reset6() in smaller functions
That can be reused by the reject bridge expression to build the reject
packet. The new functions are:
* nf_reject_ip6_tcphdr_get(): to sanitize and to obtain the TCP header.
* nf_reject_ip6hdr_put(): to build the IPv6 header.
* nf_reject_ip6_tcphdr_put(): to build the TCP header.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
|
| ab2d7251d666995740da17b2a51ca545ac5dd037 |
|
10-Oct-2014 |
Pablo Neira Ayuso <pablo@netfilter.org> |
netfilter: missing module license in the nf_reject_ipvX modules
[ 23.545204] nf_reject_ipv4: module license 'unspecified' taints kernel.
Fixes: c8d7b98 ("netfilter: move nf_send_resetX() code to nf_reject_ipvX modules")
Reported-by: Dave Young <dyoung@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
|
| c8d7b98bec43faaa6583c3135030be5eb4693acb |
|
26-Sep-2014 |
Pablo Neira Ayuso <pablo@netfilter.org> |
netfilter: move nf_send_resetX() code to nf_reject_ipvX modules
Move nf_send_reset() and nf_send_reset6() to nf_reject_ipv4 and
nf_reject_ipv6 respectively. This code is shared by x_tables and
nf_tables.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
|