Fernando Fernandez Mancera b83329fb47 netfilter: synproxy: fix erroneous tcp mss option ...

Now synproxy sends the mss value set by the user on client syn-ack packet
instead of the mss value that client announced.

Fixes: 48b1de4c11 ("netfilter: add SYNPROXY core/target")
Signed-off-by: Fernando Fernandez Mancera <ffmancera@riseup.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

2019-07-16 13:17:01 +02:00

..

ipv4

netfilter: nf_nat: merge ip/ip6 masquerade headers

2019-04-11 20:59:21 +02:00

ipv6

netfilter: nf_nat: merge ip/ip6 masquerade headers

2019-04-11 20:59:21 +02:00

br_netfilter.h

netfilter: bridge: port sysctls to use brnf_net

2019-06-17 16:36:30 +02:00

nf_conntrack_acct.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

2019-06-19 17:09:55 +02:00

nf_conntrack_bridge.h

netfilter: bridge: add connection tracking system

2019-05-30 14:18:18 -07:00

nf_conntrack_core.h

netfilter: bridge: add connection tracking system

2019-05-30 14:18:18 -07:00

nf_conntrack_count.h

netfilter: nf_conncount: speculative garbage collection on empty lists

2018-12-29 02:45:22 +01:00

nf_conntrack_ecache.h

netfilter: conntrack: remove empty pernet fini stubs

2018-12-21 00:51:54 +01:00

nf_conntrack_expect.h

netfilter: nf_conntrack_sip: fix expectation clash

2019-07-16 13:16:59 +02:00

nf_conntrack_extend.h

…

nf_conntrack_helper.h

netfilter: add API to manage NAT helpers.

2019-04-30 14:19:55 +02:00

nf_conntrack_l4proto.h

netfilter: conntrack: don't set related state for different outer address

2019-04-13 14:52:57 +02:00

nf_conntrack_labels.h

…

nf_conntrack_seqadj.h

…

nf_conntrack_synproxy.h

netfilter: synproxy: fix erroneous tcp mss option

2019-07-16 13:17:01 +02:00

nf_conntrack_timeout.h

netfilter: Export nf_ct_{set,destroy}_timeout()

2019-03-28 16:53:29 -07:00

nf_conntrack_timestamp.h

netfilter: conntrack: remove empty pernet fini stubs

2018-12-21 00:51:54 +01:00

nf_conntrack_tuple.h

…

nf_conntrack_zones.h

…

nf_conntrack.h

netfilter: conntrack: small conntrack lookup optimization

2019-06-17 16:35:30 +02:00

nf_dup_netdev.h

…

nf_flow_table.h

netfilter: nf_flow_table: remove unnecessary variable in flow_offload_tuple

2019-05-31 18:02:42 +02:00

nf_log.h

netfilter: check if the socket netns is correct.

2018-06-28 22:21:32 +09:00

nf_nat_helper.h

…

nf_nat_masquerade.h

netfilter: nf_nat_masquerade: unify ipv4/6 notifier registration

2019-04-11 20:59:34 +02:00

nf_nat_redirect.h

…

nf_nat.h

netfilter: nat: add inet family nat support

2019-04-08 23:01:39 +02:00

nf_queue.h

netfilter: nf_queue: remove unused hook entries pointer

2019-07-04 02:29:49 +02:00

nf_reject.h

netfilter: reject: skip csum verification for protocols that don't support it

2019-02-13 10:03:53 +01:00

nf_socket.h

…

nf_synproxy.h

netfilter: nf_tables: Add synproxy support

2019-07-05 21:34:23 +02:00

nf_tables_core.h

netfilter: nf_tables: add direct calls for all builtin expressions

2019-01-18 15:02:33 +01:00

nf_tables_ipv4.h

…

nf_tables_ipv6.h

…

nf_tables_offload.h

netfilter: nf_tables: add hardware offload support

2019-07-09 14:38:51 -07:00

nf_tables.h

netfilter: nf_tables: add hardware offload support

2019-07-09 14:38:51 -07:00

nf_tproxy.h

Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next

2018-07-20 22:28:28 -07:00

nft_fib.h

netfilter: nft_fib: Fix existence check support

2019-05-21 16:10:38 +02:00

nft_meta.h

netfilter: nft_meta: move bridge meta keys into nft_meta_bridge

2019-07-05 21:34:47 +02:00

nft_reject.h

…

xt_rateest.h

…