Stephen Hemminger
227b60f510
[INET]: local port range robustness
...
Expansion of original idea from Denis V. Lunev <den@openvz.org>
Add robustness and locking to the local_port_range sysctl.
1. Enforce that low < high when setting.
2. Use seqlock to ensure atomic update.
The locking might seem like overkill, but there are
cases where sysadmin might want to change value in the
middle of a DoS attack.
Signed-off-by: Stephen Hemminger <shemminger@linux-foundation.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-10-10 17:30:46 -07:00
..
ipvs
[NET]: Make core networking code use seq_open_private
2007-10-10 16:55:33 -07:00
netfilter
[NETFILTER]: Make netfilter code use the seq_open_private
2007-10-10 16:55:34 -07:00
af_inet.c
[IPV4]: Add ICMPMsgStats MIB (RFC 4293)
2007-10-10 16:51:28 -07:00
ah4.c
[IPSEC]: Move IP protocol setting from transforms into xfrm4_input.c
2007-10-10 16:55:56 -07:00
arp.c
[NET]: Make core networking code use seq_open_private
2007-10-10 16:55:33 -07:00
cipso_ipv4.c
datagram.c
devinet.c
[IPV4]: When possible test for IFF_LOOPBACK and not dev == loopback_dev
2007-10-10 16:52:48 -07:00
esp4.c
[IPSEC]: Move IP protocol setting from transforms into xfrm4_input.c
2007-10-10 16:55:56 -07:00
fib_frontend.c
fib_hash.c
[NET]: Make core networking code use seq_open_private
2007-10-10 16:55:33 -07:00
fib_lookup.h
fib_rules.c
fib_semantics.c
fib_trie.c
[NET]: Make core networking code use seq_open_private
2007-10-10 16:55:33 -07:00
icmp.c
[IPV4]: Add ICMPMsgStats MIB (RFC 4293)
2007-10-10 16:51:28 -07:00
igmp.c
[NET]: Make core networking code use seq_open_private
2007-10-10 16:55:33 -07:00
inet_connection_sock.c
[INET]: local port range robustness
2007-10-10 17:30:46 -07:00
inet_diag.c
[NETLINK]: Avoid pointer in netlink_run_queue
2007-10-10 16:51:24 -07:00
inet_hashtables.c
[INET]: local port range robustness
2007-10-10 17:30:46 -07:00
inet_lro.c
[NET]: sparse warning fixes
2007-10-10 16:54:48 -07:00
inet_timewait_sock.c
inetpeer.c
ip_forward.c
ip_fragment.c
ip_gre.c
[NET]: Move hardware header operations out of netdevice.
2007-10-10 16:52:52 -07:00
ip_input.c
ip_options.c
ip_output.c
[NET]: Move hardware header operations out of netdevice.
2007-10-10 16:52:52 -07:00
ip_sockglue.c
[NET]: sparse warning fixes
2007-10-10 16:54:48 -07:00
ipcomp.c
[IPSEC]: Move IP protocol setting from transforms into xfrm4_input.c
2007-10-10 16:55:56 -07:00
ipconfig.c
[NET]: Wrap netdevice hardware header creation.
2007-10-10 16:52:50 -07:00
ipip.c
ipmr.c
[NET]: Make core networking code use seq_open_private
2007-10-10 16:55:33 -07:00
Kconfig
Makefile
netfilter.c
proc.c
[NET]: sparse warning fixes
2007-10-10 16:54:48 -07:00
protocol.c
raw.c
[NET]: Make core networking code use seq_open_private
2007-10-10 16:55:33 -07:00
route.c
[NET]: Make core networking code use seq_open_private
2007-10-10 16:55:33 -07:00
syncookies.c
sysctl_net_ipv4.c
[INET]: local port range robustness
2007-10-10 17:30:46 -07:00
tcp.c
[TCP]: Return useful listenq info in tcp_info and INET_DIAG_INFO.
2007-10-10 16:51:35 -07:00
tcp_bic.c
tcp_cong.c
tcp_cubic.c
tcp_diag.c
[TCP]: Return useful listenq info in tcp_info and INET_DIAG_INFO.
2007-10-10 16:51:35 -07:00
tcp_highspeed.c
tcp_htcp.c
tcp_hybla.c
tcp_illinois.c
tcp_input.c
[TCP]: Separate lost_retrans loop into own function
2007-10-10 16:55:51 -07:00
tcp_ipv4.c
[INET]: local port range robustness
2007-10-10 17:30:46 -07:00
tcp_lp.c
tcp_minisocks.c
tcp_output.c
[TCP]: Fix two off-by-one errors in fackets_out adjusting logic
2007-10-10 16:54:47 -07:00
tcp_probe.c
tcp_scalable.c
tcp_timer.c
tcp_vegas.c
tcp_vegas.h
tcp_veno.c
tcp_westwood.c
tcp_yeah.c
tunnel4.c
udp.c
[INET]: local port range robustness
2007-10-10 17:30:46 -07:00
udp_impl.h
udplite.c
xfrm4_input.c
[IPSEC]: Move IP protocol setting from transforms into xfrm4_input.c
2007-10-10 16:55:56 -07:00
xfrm4_mode_beet.c
[IPSEC]: Move IP length/checksum setting out of transforms
2007-10-10 16:55:56 -07:00
xfrm4_mode_transport.c
[IPSEC]: Use IPv6 calling convention as the convention for x->mode->output
2007-10-10 16:55:54 -07:00
xfrm4_mode_tunnel.c
[IPSEC]: Move IP length/checksum setting out of transforms
2007-10-10 16:55:56 -07:00
xfrm4_output.c
[IPSEC]: Move IP length/checksum setting out of transforms
2007-10-10 16:55:56 -07:00
xfrm4_policy.c
[NET]: Make the loopback device per network namespace.
2007-10-10 16:52:49 -07:00
xfrm4_state.c
xfrm4_tunnel.c
[IPSEC]: Move IP protocol setting from transforms into xfrm4_input.c
2007-10-10 16:55:56 -07:00