Pablo Neira Ayuso 1814096980
netfilter: nft_payload: layer 4 checksum adjustment for pseudoheader fields ...
This patch adds a new flag that signals the kernel to update layer 4
checksum if the packet field belongs to the layer 4 pseudoheader. This
implicitly provides stateless NAT 1:1 that is useful under very specific
usecases.
Since rules mangling layer 3 fields that are part of the pseudoheader
may potentially convey any layer 4 packet, we have to deal with the
layer 4 checksum adjustment using protocol specific code.
This patch adds support for TCP, UDP and ICMPv6, since they include the
pseudoheader in the layer 4 checksum calculation. ICMP doesn't, so we
can skip it.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org >
2016-12-06 21:47:54 +01:00
2016-11-22 22:50:46 +01:00
2016-12-06 21:47:54 +01:00
2016-12-06 21:42:00 +01:00
2016-07-11 02:01:14 +02:00
2016-02-11 03:54:14 -05:00
2016-11-16 23:22:17 -05:00
2016-11-09 13:41:53 -05:00
2016-06-15 20:41:22 -07:00
2016-12-02 13:28:36 -05:00
2016-10-21 11:29:02 -04:00
2016-09-08 11:10:12 +01:00
2016-09-04 13:29:29 -07:00
2016-08-02 02:57:29 +03:00
2016-02-09 04:45:49 -05:00
2016-11-18 10:59:15 -05:00
2016-11-18 10:44:31 -05:00
2016-06-27 15:06:17 -04:00
2016-10-30 12:42:58 -04:00
2016-07-08 12:20:57 +02:00
2016-03-13 15:01:00 -04:00
2016-04-19 20:09:25 -04:00
2016-04-25 16:44:27 -04:00
2016-06-25 12:19:35 -04:00
2016-04-25 16:44:27 -04:00
2016-06-09 23:41:03 -07:00
2016-11-24 16:01:14 -05:00
2016-09-23 08:38:50 -04:00
2016-02-16 20:21:48 -05:00
2016-11-09 13:41:54 -05:00
2015-10-08 04:27:02 -07:00
2016-04-25 16:20:09 -04:00
2016-11-04 14:45:23 -04:00
2016-11-09 13:41:54 -05:00
2016-11-04 14:45:23 -04:00
2016-05-20 18:03:16 -04:00
2016-09-30 13:29:21 +02:00
2016-09-30 13:29:21 +02:00
2016-06-07 16:37:14 -07:00
2016-11-13 12:14:59 -05:00
2016-06-17 20:23:32 -07:00
2016-08-18 01:17:32 -04:00
2016-11-15 22:27:27 -05:00
2016-07-25 17:55:43 -07:00
2016-03-14 12:19:46 -04:00
2016-04-27 22:48:25 -04:00
2016-10-19 12:11:36 +02:00
2016-01-04 20:40:41 +01:00
2016-12-03 23:21:37 -05:00
2015-12-15 23:25:20 -05:00
2016-03-22 15:45:44 -04:00
2016-04-04 22:11:20 -04:00
2016-05-20 18:03:17 -04:00
2016-10-29 15:09:21 -04:00
2016-08-13 15:08:00 -07:00
2016-02-16 20:42:54 -05:00
2016-04-04 22:11:20 -04:00
2016-11-03 15:41:11 -04:00
2015-10-20 06:08:27 -07:00
2015-12-16 00:14:12 -05:00
2016-03-13 23:55:13 -04:00
2016-10-27 16:30:52 -04:00
2016-11-04 14:45:23 -04:00
2016-11-02 15:18:36 -04:00
2016-12-03 19:29:35 -05:00
2016-11-18 10:59:15 -05:00
2016-06-06 09:47:25 +09:00
2016-11-15 10:54:36 -05:00
2016-12-03 12:29:53 -05:00
2016-01-29 17:13:43 +01:00
2016-08-17 19:36:23 -04:00
2016-10-13 12:05:26 -04:00
2016-11-16 17:01:15 -05:00
2016-10-30 12:42:58 -04:00
2016-07-08 13:23:12 +02:00
2015-10-23 06:26:42 -07:00
2016-10-03 02:00:22 -04:00
2016-10-04 02:11:51 -04:00
2016-12-03 23:21:37 -05:00
2016-11-22 13:27:16 -05:00
2016-07-05 09:06:29 -07:00
2016-06-27 15:06:18 -04:00
2016-12-03 15:54:02 -05:00
2015-12-08 22:02:33 -05:00
2016-07-08 12:20:57 +02:00
2016-03-23 22:09:58 -04:00
2016-12-02 13:28:37 -05:00
2016-11-07 20:15:55 -05:00
2016-08-15 10:55:53 -07:00
2016-04-07 16:53:30 -04:00
2016-10-23 19:35:24 -04:00
2016-10-23 19:35:24 -04:00
2016-04-04 22:11:19 -04:00
2016-11-04 14:45:23 -04:00
2016-06-30 06:15:04 -04:00
2016-09-19 01:47:18 -04:00
2016-02-08 10:30:42 -05:00
2016-12-02 12:49:59 -05:00
2016-11-09 20:40:06 -05:00
2016-11-09 20:40:06 -05:00
2016-04-28 11:49:45 -04:00
2016-01-19 14:44:23 -05:00
2016-12-02 13:46:09 -05:00
2016-08-28 23:32:41 -04:00
2016-09-28 04:48:00 -04:00
2016-12-02 12:49:59 -05:00
2016-05-03 16:08:14 -04:00
2015-10-26 22:24:22 -07:00
2016-06-17 20:23:32 -07:00
2016-11-15 11:59:38 -05:00
2016-11-15 11:59:38 -05:00
2016-11-15 12:16:13 -05:00
2016-09-23 06:46:57 -04:00
Pablo Neira Ayuso
1814096980