Stephen Hemminger
227b60f510
[INET]: local port range robustness
...
Expansion of original idea from Denis V. Lunev <den@openvz.org>
Add robustness and locking to the local_port_range sysctl.
1. Enforce that low < high when setting.
2. Use seqlock to ensure atomic update.
The locking might seem like overkill, but there are
cases where sysadmin might want to change value in the
middle of a DoS attack.
Signed-off-by: Stephen Hemminger <shemminger@linux-foundation.org>
Signed-off-by: David S. Miller <davem@davemloft.net>
2007-10-10 17:30:46 -07:00
..
netfilter
[NETFILTER]: ctnetlink: use netlink policy
2007-10-10 16:53:35 -07:00
addrconf.c
[IPV6]: Defer IPv6 device initialization until a valid qdisc is specified
2007-10-10 16:55:52 -07:00
addrconf_core.c
[IPV6]: ipv6_addr_type() doesn't know about RFC4193 addresses.
2007-07-31 02:28:21 -07:00
af_inet6.c
[IPV6]: Add ICMPMsgStats MIB (RFC 4293) [rev 2]
2007-10-10 16:51:27 -07:00
ah6.c
[IPSEC]: Get rid of ipv6_{auth,esp,comp}_hdr
2007-10-10 16:55:55 -07:00
anycast.c
[NET]: Make core networking code use seq_open_private
2007-10-10 16:55:33 -07:00
datagram.c
[NET]: Make the device list and device lookups per namespace.
2007-10-10 16:49:10 -07:00
esp6.c
[IPSEC]: Move IP length/checksum setting out of transforms
2007-10-10 16:55:56 -07:00
exthdrs.c
[IPV6]: Do not send RH0 anymore.
2007-07-10 22:55:49 -07:00
exthdrs_core.c
fib6_rules.c
[IPV4/IPV6/DECNET]: Small cleanup for fib rules.
2007-10-10 16:51:22 -07:00
icmp.c
[IPV6]: Add ICMPMsgStats MIB (RFC 4293) [rev 2]
2007-10-10 16:51:27 -07:00
inet6_connection_sock.c
[IPV6] XFRM: Fix connected socket to use transformation.
2007-10-10 16:48:32 -07:00
inet6_hashtables.c
[INET]: local port range robustness
2007-10-10 17:30:46 -07:00
ip6_fib.c
[IPv6]: use container_of() macro in fib6_clean_node()
2007-10-10 16:54:58 -07:00
ip6_flowlabel.c
[NET]: Make core networking code use seq_open_private
2007-10-10 16:55:33 -07:00
ip6_input.c
[NET]: Dynamically allocate the loopback device, part 1.
2007-10-10 16:52:14 -07:00
ip6_output.c
[IPV6]: Add ICMPMsgStats MIB (RFC 4293) [rev 2]
2007-10-10 16:51:27 -07:00
ip6_tunnel.c
[NET]: Nuke SET_MODULE_OWNER macro.
2007-10-10 16:51:13 -07:00
ipcomp6.c
[IPSEC]: Move IP length/checksum setting out of transforms
2007-10-10 16:55:56 -07:00
ipv6_sockglue.c
[NET]: sparse warning fixes
2007-10-10 16:54:48 -07:00
Kconfig
[IPV6] MIP6: Loadable module support for MIPv6.
2007-07-10 22:15:42 -07:00
Makefile
[IPV6] MIP6: Loadable module support for MIPv6.
2007-07-10 22:15:42 -07:00
mcast.c
[NET]: Make core networking code use seq_open_private
2007-10-10 16:55:33 -07:00
mip6.c
[IPSEC]: Move IP length/checksum setting out of transforms
2007-10-10 16:55:56 -07:00
ndisc.c
[NET]: sparse warning fixes
2007-10-10 16:54:48 -07:00
netfilter.c
proc.c
[IPV6]: Add ICMPMsgStats MIB (RFC 4293) [rev 2]
2007-10-10 16:51:27 -07:00
protocol.c
raw.c
[NET]: Make core networking code use seq_open_private
2007-10-10 16:55:33 -07:00
reassembly.c
[NET]: Make the device list and device lookups per namespace.
2007-10-10 16:49:10 -07:00
route.c
[NET]: Make the loopback device per network namespace.
2007-10-10 16:52:49 -07:00
sit.c
[NET]: Nuke SET_MODULE_OWNER macro.
2007-10-10 16:51:13 -07:00
sysctl_net_ipv6.c
tcp_ipv6.c
[IPV6]: Add v4mapped address inline
2007-10-10 16:48:32 -07:00
tunnel6.c
udp.c
[IPV6]: Add v4mapped address inline
2007-10-10 16:48:32 -07:00
udp_impl.h
udplite.c
xfrm6_input.c
xfrm6_mode_beet.c
[IPSEC]: Move IP length/checksum setting out of transforms
2007-10-10 16:55:56 -07:00
xfrm6_mode_ro.c
[IPSEC]: Use IPv6 calling convention as the convention for x->mode->output
2007-10-10 16:55:54 -07:00
xfrm6_mode_transport.c
[IPSEC]: Use IPv6 calling convention as the convention for x->mode->output
2007-10-10 16:55:54 -07:00
xfrm6_mode_tunnel.c
[IPSEC]: Move IP length/checksum setting out of transforms
2007-10-10 16:55:56 -07:00
xfrm6_output.c
[IPSEC]: Move IP length/checksum setting out of transforms
2007-10-10 16:55:56 -07:00
xfrm6_policy.c
[NET]: Make the loopback device per network namespace.
2007-10-10 16:52:49 -07:00
xfrm6_state.c
[IPV6] MIP6: Loadable module support for MIPv6.
2007-07-10 22:15:42 -07:00
xfrm6_tunnel.c
[IPSEC]: Move IP length/checksum setting out of transforms
2007-10-10 16:55:56 -07:00